Issues

• Add more options for database and object storage

  SonicJs-Org/sonicjs#1102 · Filter by author erikdemarco opened on Sep 30, 2026

• Magic link signs nobody in when the browser has no current 'csrf_token'

  SonicJs-Org/sonicjs#1101 · Filter by author mmcintosh opened on Sep 22, 2026

• ResendProvider cannot send on Workers: unbound fetch stored as an instance property throws "Illegal invocation"

  SonicJs-Org/sonicjs#1099 · Filter by author elpastiche opened on Sep 14, 2026

• Email plugin settings are never read: loadDbEmailSettings queries a v2 plugins table that does not exist in v3

  SonicJs-Org/sonicjs#1098 · Filter by author elpastiche opened on Sep 14, 2026

• Redirect Management Plugin - GET /api/redirects returns a 404

  SonicJs-Org/sonicjs#1067 · Filter by author jimmaaay opened on Aug 24, 2026

• fix(auth): prevent Better Auth 1.7 from resolving in new consumers

  SonicJs-Org/sonicjs#1061 · Filter by author shoveller opened on Aug 19, 2026
  3

• Can't login as admin in production

  SonicJs-Org/sonicjs#1054 · Filter by author hankeyyh opened on Aug 14, 2026
  2

• [Vulnerability] Hardcoded JWT Secret May Lead to Privilege Escalation Risks

  SonicJs-Org/sonicjs#1043 · Filter by author lx915 opened on Jul 25, 2026

• security: slug-validate field_name on write to close fieldId XSS sink

  security
  SonicJs-Org/sonicjs#1031 · Filter by author lane711 opened on Jul 24, 2026

• First-boot FK race + no single-flight leaves RBAC/plugins unseeded and latches the broken state (beta.25)

  SonicJs-Org/sonicjs#1017 · Filter by author mmcintosh opened on Jul 20, 2026
  2

  

• beta.25 cold-start caches break outside a Workers isolate — ~25 core unit tests fail on a clean checkout

  SonicJs-Org/sonicjs#1016 · Filter by author mmcintosh opened on Jul 20, 2026
  

• fix: reconcile code-defined collection types on cached bootstrap

  SonicJs-Org/sonicjs#1014 · Filter by author bobbwal opened on Jul 19, 2026

• docs: website advertises v3.0.0-beta.24 after v3.0.0-beta.25 release

  SonicJs-Org/sonicjs#1012 · Filter by author bobbwal opened on Jul 18, 2026

• npm ci fails on main: package-lock.json is out of sync with package.json

  SonicJs-Org/sonicjs#1011 · Filter by author bobbwal opened on Jul 18, 2026

• [3.0.0-beta.17] SonicJSConfig disabled plugins show in Sidebar

  SonicJs-Org/sonicjs#971 · Filter by author LukeSeers opened on Jun 29, 2026

• [3.0.0-beta.17] SonicJSConfig plugins register uninstall plugin

  SonicJs-Org/sonicjs#970 · Filter by author LukeSeers opened on Jun 29, 2026

• Evaluate: User Preferences API (cross-collection isolation)

  enhancementquestion
  SonicJs-Org/sonicjs#962 · Filter by author lane711 opened on Jun 26, 2026

• Auth robustness tests: login transaction safety + refresh freshness

  enhancement
  SonicJs-Org/sonicjs#961 · Filter by author lane711 opened on Jun 26, 2026

• Session lifecycle: deeper invariant tests (expiry cleanup, refresh, updatedAt)

  enhancement
  SonicJs-Org/sonicjs#960 · Filter by author lane711 opened on Jun 26, 2026

• Account lockout: login-path integration + admin unlock tests

  enhancementsecurity
  SonicJs-Org/sonicjs#959 · Filter by author lane711 opened on Jun 26, 2026

• Per-user disableLocalStrategy (SSO-only accounts)

  enhancementsecurity
  SonicJs-Org/sonicjs#958 · Filter by author lane711 opened on Jun 26, 2026

• Email verification flow (verify endpoint + login gating)

  enhancementsecurity
  SonicJs-Org/sonicjs#957 · Filter by author lane711 opened on Jun 26, 2026

• [v3 bug]: Create folder action error

  SonicJs-Org/sonicjs#929 · Filter by author miljan-aleksic opened on Jun 19, 2026

• [v3 feat]: Support for wrangler.jsonc

  SonicJs-Org/sonicjs#928 · Filter by author miljan-aleksic opened on Jun 19, 2026

• "Select Media" picker: search nests a new panel per keystroke and does not filter

  SonicJs-Org/sonicjs#890 · Filter by author PlusA2M opened on Jun 13, 2026