Issues

• V2 table freezes after an inline date edit with ~100 rows; invalidateFlowCache dominates CPU time

  nocobase/nocobase#11054 · Filter by author shaggyzzz opened on Oct 20, 2026

• No warning for unsaved changes

  nocobase/nocobase#11045 · Filter by author wannestal opened on Oct 20, 2026
  2

  

• [Feature Request] Support hosted MCP OAuth clients (ChatGPT Web, Claude.ai) via CIMD or trusted client registration

  nocobase/nocobase#10965 · Filter by author xDemonME opened on Oct 16, 2026
  1

  

• No error message field for validation rule

  nocobase/nocobase#10960 · Filter by author Mischwa74 opened on Oct 16, 2026
  4

  

• bug: AI employees show "No available models" without actionable diagnostics for stale dedicated-model bindings

  nocobase/nocobase#10903 · Filter by author 0Freesky0 opened on Oct 15, 2026
  2

  

• Relation fields of a collection are silently not loaded after restart when the collection contains a self-referencing belongsTo field (v2.2.22)

  nocobase/nocobase#10850 · Filter by author SicutEst opened on Oct 14, 2026
  2

  

• [Bug] Client V2 table: clearing column sorting keeps the previous manual sort instead of restoring default sorting

  nocobase/nocobase#10657 · Filter by author Andy1024L opened on Oct 10, 2026
  1

  

• sqlCollection:setFields bypasses checkSQL validation (sibling of GHSA-wrwh-c28m-9jjh)

  nocobase/nocobase#10629 · Filter by author carfeii opened on Oct 9, 2026
  1

  

• Audio preview and file link always show the first opened file when an attachment field has multiple MP3 files

  nocobase/nocobase#10571 · Filter by author linaverl opened on Oct 6, 2026
  1

  

• Mobile: User Menu popover remains open when opening Change Password modal

  nocobase/nocobase#10559 · Filter by author rosaloverdue-dev opened on Sep 29, 2026
  1

  

• [Feature Request] 表格区块分页器支持“跳转到指定页码” (showQuickJumper)

  nocobase/nocobase#10557 · Filter by author in-shadow-byte opened on Sep 29, 2026
  1

  

• [Bug] New UI blocks are dropped after navigating to settings

  nocobase/nocobase#10522 · Filter by author a-clayton opened on Sep 17, 2026
  8

  

• Office preview with Local Storage loses temporaryAccessToken after redirect and requires public legacy storage

  nocobase/nocobase#10505 · Filter by author miles170 opened on Sep 15, 2026
  

• NocoBase Skill 使用通用 o2o 创建反向一对一字段时，可能导致关联方向错误

  nocobase/nocobase#10489 · Filter by author Roc-kit opened on Sep 9, 2026
  1

  

• Popup Markdown using ctx.popup.record resolves twice redundantly; with a formula field the resolves stall ~1s apart (~2s popup)

  nocobase/nocobase#10458 · Filter by author alexzaech opened on Sep 4, 2026
  

• [Bug]: excessive false-positive warnings for virtual/custom resources in @nocobase/plugin-workflow-request-interceptor

  nocobase/nocobase#10457 · Filter by author STlxx-lin opened on Sep 4, 2026
  1

  

• [Bug] Global request-interception workflow not triggered after restart (enabledCache empty + middleware not bound to already-used datasource)

  nocobase/nocobase#10435 · Filter by author fede-ciliberti opened on Aug 31, 2026
  

• [Bug] Calendar block day headers not translated when using es-ES locale (react-big-calendar UMD bundle ignores dayjs locale)

  nocobase/nocobase#10429 · Filter by author junrexgt opened on Aug 29, 2026
  1

  

• Under the default role mode, X-Role: __union__ is silently rewritten to the user's first role instead of being refused like every other unheld role name

  nocobase/nocobase#10399 · Filter by author truecourse-agent opened on Aug 21, 2026
  1

  

• A data request to a destroyed collection answers 500 TypeError, where the same API answers 404 for a collection that never existed

  nocobase/nocobase#10397 · Filter by author truecourse-agent opened on Aug 21, 2026
  1

  

• [Compatibility Issue] Agoric SES lockdown() crashes with modern @simplewebauthn (v11+) due to reflect-metadata

  nocobase/nocobase#10320 · Filter by author Artur-Su opened on Aug 9, 2026
  2

  

• [Security] checkSQL blacklist bypass via lo_import/pg_largeobject/dblink + SQLite injection in array.ts

  nocobase/nocobase#10263 · Filter by author leanworld7-netizen opened on Aug 3, 2026
  

• Security Report — SQL Injection Sibling Findings (CVE-2026-52887 related)

  nocobase/nocobase#10257 · Filter by author leanworld7-netizen opened on Aug 3, 2026
  

• Security: SQLite SQLi in $anyOf/$noneOf operators + Mass Assignment in defineMyInAppMessages

  nocobase/nocobase#10255 · Filter by author leanworld7-netizen opened on Aug 3, 2026
  

• Mobile UI: On-screen keyboard overlays select component dropdown options

  nocobase/nocobase#10253 · Filter by author Artur-Su opened on Aug 2, 2026
  1