Issues

• Optional AgentCert / agent-trust verification as an auth plugin — fit?

  enhancementexternalfeaturequestion
  TykTechnologies/tyk#8732 · Filter by author karlmehta opened on Sep 28, 2026
  1

• Proposal: optional feeless Nano (XNO) settle rail for metered API / AI-gateway usage

  enhancementexternalfeature
  TykTechnologies/tyk#8729 · Filter by author dhyabi2 opened on Sep 25, 2026
  3

• Python coprocess segfaults on the first dispatched request under CPython 3.12

  bugexternal
  TykTechnologies/tyk#8710 · Filter by author Krismix1 opened on Sep 17, 2026
  1

• OTel: successful plugin-terminated requests (StatusRespond) are recorded as span status Error ("response succeed")

  bugexternal
  TykTechnologies/tyk#8684 · Filter by author bourlaad opened on Sep 8, 2026
  2

• Security disclosure: request for a private reporting channel

  bugexternalquestion
  TykTechnologies/tyk#8558 · Filter by author sec-reex opened on Aug 9, 2026
  1

• Security disclosure: request for a private reporting channel

  bugexternalquestion
  TykTechnologies/tyk#8557 · Filter by author sec-reex opened on Aug 9, 2026
  1

• Low-privilege MCP consumer bypasses Tool-Based Access Control via Content-Type case differential

  bugexternal
  TykTechnologies/tyk#8539 · Filter by author matiasinsaurralde opened on Aug 4, 2026
  1

• Extend GraphQL Field-Based Permissions to support Input Types (⁠INPUT_OBJECT⁠)

  enhancementexternalfeature
  TykTechnologies/tyk#8538 · Filter by author inamit opened on Aug 4, 2026
  1

• Bug: maxLatencyWriter panics on hijacked connections with OpenTelemetry enabled

  bugexternal
  TykTechnologies/tyk#8489 · Filter by author probelabs opened on Jul 13, 2026
  1

• Add non-cloning ctx.GetOASDefinitionRaw accessor for read-only hot paths

  enhancementexternal
  TykTechnologies/tyk#8484 · Filter by author emmanuelchaplais2 opened on Jul 13, 2026
  2

• Add opt-in request body passthrough to avoid buffering large uploads

  enhancementexternalfeature
  TykTechnologies/tyk#8483 · Filter by author emmanuelchaplais2 opened on Jul 13, 2026
  3

• OAS 3.1 import rejects default FastAPI/Pydantic output: lookahead pattern on Decimal fields fails RE2 compile (invalid or unsupported Perl syntax: (?!)

  bugexternal
  TykTechnologies/tyk#8321 · Filter by author sakaal opened on Jun 16, 2026
  1

• Bug: Critical data loss in RPC analytics purger when MDCB is unstable

  bugexternal
  TykTechnologies/tyk#8301 · Filter by author probelabs opened on Jun 9, 2026
  1

• Bug: JSVM TykMakeHttpRequest and TykBatchRequest panic with nil pointer dereference during API reload (Race Condition)

  bugexternal
  TykTechnologies/tyk#8285 · Filter by author probelabs opened on Jun 8, 2026
  2

• [bug] Go-plugin intentional reject (4xx/5xx) emits unconditional level=error log spam — extend existing errpack pattern to fix

  bugexternal
  TykTechnologies/tyk#8245 · Filter by author tshtark opened on May 25, 2026
  1

• goplugin: analytics RawResponse is a zero-value HTTP response for plugin-rejected requests (status >= 400)

  bugexternal
  TykTechnologies/tyk#8242 · Filter by author tshtark opened on May 21, 2026
  1

• Feature Request: Add Endpoints field to coprocess_session_state.proto

  enhancementexternal
  TykTechnologies/tyk#8231 · Filter by author probelabs opened on May 15, 2026
  1

• [TT-17743] Emit RFC 9429-compliant rate limit headers

  enhancementexternal
  TykTechnologies/tyk#8192 · Filter by author atkrad opened on May 8, 2026
  1

• Add Retry-After header and use 429 status code on quota-exceeded responses

  enhancementexternal
  TykTechnologies/tyk#8191 · Filter by author atkrad opened on May 8, 2026
  2

• Vulnerability in tyk project

  bugexternal
  TykTechnologies/tyk#8147 · Filter by author ankitdn opened on Apr 23, 2026
  1

• Hardcoded version string in /hello status response

  bugexternal
  TykTechnologies/tyk#7983 · Filter by author torben-j opened on Apr 9, 2026
  1

• trace-id missing in analytics records tags in error responses

  bugexternal
  TykTechnologies/tyk#7928 · Filter by author lvielhauer opened on Mar 26, 2026
  2

• Date header is only added during request signing if the header list is empty

  bugexternal
  TykTechnologies/tyk#7926 · Filter by author jenni-okelly opened on Mar 25, 2026
  1

• Oauth token - date_created not filled on key

  bugexternal
  TykTechnologies/tyk#7917 · Filter by author hctomaspop opened on Mar 23, 2026
  1

• GraphQL Federation: entity resolution fails for heterogeneous arrays where items have different nullable federated fields

  bugexternal
  TykTechnologies/tyk#7883 · Filter by author dennissetiawan opened on Mar 12, 2026
  2