Search results

API key creation allows a non-admin to bind a key to any user and gain that user's privileges (privilege escalation to admin)

Status: Open.

#6380 In StackStorm/st2;

· geo-chen opened on Jun 20, 2026

Execution User Impersonation Allows Cross-Account KV Secret Exfiltration (All Versions Including 3.9.0)

Status: Open.

#6379 In StackStorm/st2;

· geo-chen opened on Jun 20, 2026

Allow st2-run-pack-tests to emit machine-readable coverage reports and aggregate coverage across packs

Status: Open.

#6377 In StackStorm/st2;

· anurag-bug opened on Jun 17, 2026

Action execution fails with KeyError '_cls' when parameters contain '_ref' keys

Status: Open.

#6376 In StackStorm/st2;

· jlesuer87 opened on Apr 17, 2026

stackstorm statsd metrics per action, by action_ref

Status: Open.

#6361 In StackStorm/st2;

· danxg87 opened on Nov 12, 2025

Add Timeout Option for st2 pack install

Status: Open.

#6349 In StackStorm/st2;

· docbyte86 opened on Aug 20, 2025

Signed SSH Certificates Support

Status: Open.

#6346 In StackStorm/st2;

· freddierice opened on Aug 14, 2025

Fix PEM formatting bug when loading private SSH keys in _get_pkey_object

Status: Open.

#6338 In StackStorm/st2;

· amritupreti opened on Jul 4, 2025

Keypair API response inconsistency admin vs. non-admin when calling system scoped keys

Status: Open.

#6335 In StackStorm/st2;

· fdrab opened on May 29, 2025

python_runner.py should check the utf8 length to determine when to use stdin for parameters.

Status: Open.

#6331 In StackStorm/st2;

· guzzijones opened on Apr 29, 2025

Workflow finishes too early when parallel branches are running

Status: Open.

#6316 In StackStorm/st2;

· Dupangel opened on Mar 13, 2025

Multiple Policies to Govern a single Action/Workflow

Status: Open.

#6310 In StackStorm/st2;

· jpavlav opened on Mar 5, 2025