Issues

• Private HTTP resources wildcard certificates show as failed, despite working, when created via docker label blueprint

  fosrl/pangolin#3878 · Filter by author MexHigh opened on Oct 8, 2026
  3

• Preference for wildcard certificates is not respected for deep wildcard domains when issued through a private resource

  fosrl/pangolin#3875 · Filter by author MexHigh opened on Oct 7, 2026
  2

• Deleting private resources that share a destination IP removes the Newt rule a remaining resource still needs (resource stays enabled but passes no traffic)

  fosrl/pangolin#3874 · Filter by author cat-inGlasses opened on Oct 7, 2026

• CSV/formula injection in generateCSV: log exports emit attacker-controlled cells that execute in an admin's spreadsheet

  fosrl/pangolin#3864 · Filter by author MauryaQbit opened on Oct 5, 2026

• deleteOrgById loads only one site (.limit(1) at server/lib/deleteOrg.ts:59), skipping per-site cleanup for the rest

  fosrl/pangolin#3863 · Filter by author MauryaQbit opened on Oct 5, 2026
  1

• On demand not consistent

  fosrl/pangolin#3861 · Filter by author ImAPilotBro opened on Oct 5, 2026
  1

• [Bug]: Cannot delete Site with 0 resources due to lingering Newt connector and role bindings (HTTP 403)

  fosrl/pangolin#3860 · Filter by author fuzzyupdates opened on Oct 5, 2026
  2

• Unauthenticated pages receive server env (version, internal ports, MaxMind paths)

  fosrl/pangolin#3856 · Filter by author Lupphes opened on Oct 4, 2026

• Newt site stays online for up to 2 minutes after its websocket closes when the connector host dies

  fosrl/pangolin#3855 · Filter by author escooterclinic opened on Oct 4, 2026
  4

• no ipv6 traffic routed through Newt tunnel when in tunnel all mode

  Improvementneeds investigating
  fosrl/pangolin#3839 · Filter by author hoeiendag opened on Oct 1, 2026
  15

  

• Blueprint auth.basic-auth from Docker labels sometimes leaves two header-auth rows after a container is recreated

  fosrl/pangolin#3835 · Filter by author ronalove opened on Sep 30, 2026
  1

• read RDCleanPath request: not enough bytes

  stale
  fosrl/pangolin#3819 · Filter by author kitkat0981 opened on Sep 25, 2026
  1

• Resource/port lost until Pangolin restart when adding a new port or when a tunneled service (Newt/Docker) restarts

  stale
  fosrl/pangolin#3818 · Filter by author dogmwa opened on Sep 25, 2026
  8

• Forward-auth redirects requests carrying Authorization: Bearer even with a valid session cookie, breaking any Bearer-token API behind an SSO-gated resource

  stale
  fosrl/pangolin#3814 · Filter by author gchahcg opened on Sep 25, 2026
  1

• High CPU usage when refreshing public resource page

  stale
  fosrl/pangolin#3793 · Filter by author K0ng2 opened on Sep 20, 2026
  2

• AI Gateway: HTTP 302 from POST requests via OpenAI Python client (intercepted before reaching gateway)

  bugneeds investigating
  fosrl/pangolin#3720 · Filter by author KJELD-LRNT opened on Sep 10, 2026
  6

• Disabling UDP/TCP connections does not disable them

  Improvementneeds investigating
  fosrl/pangolin#3718 · Filter by author C4215 opened on Sep 9, 2026
  15

• Cannot Login via MicrosoftAccount to RDP

  dependenciesneeds investigating
  fosrl/pangolin#3715 · Filter by author scetu opened on Sep 8, 2026
  7

• AI Providers: Cannot edit existing providers in an organization with an Umlaut in its name

  bug
  fosrl/pangolin#3692 · Filter by author absynth42 opened on Sep 3, 2026
  6

  

• Incomplete calendar in HTTP reports when using Safari

  bug
  fosrl/pangolin#3642 · Filter by author svillar opened on Aug 26, 2026
  9

  

• Admin not given automatic access to private resource

  bug
  fosrl/pangolin#3630 · Filter by author bustinbung opened on Aug 23, 2026
  14

  

• Allow all models in AI provider configuration throws permissions error

  bug
  fosrl/pangolin#3629 · Filter by author jiriteach opened on Aug 22, 2026
  2

• iOS and MacOS Pangolin clients sudden disconnections from private HTTP resources

  fosrl/pangolin#3625 · Filter by author svillar opened on Aug 21, 2026
  13

• Cannot Connect to Pangolin Cloud via T-Mobile Dualstack

  needs investigating
  fosrl/pangolin#3620 · Filter by author caiphus2k22 opened on Aug 20, 2026
  6

  

• Feature: per-site-resource opt-out from advertising the destination as a client route (alias-address-only mode)

  Improvement
  fosrl/pangolin#3548 · Filter by author escooterclinic opened on Aug 8, 2026
  8