Skip to content

Pull requests: appsmithorg/appsmith

New pull request New
57 Open 18,020 Closed
57 Open 18,020 Closed
Author
Filter by author
Loading
Label
Filter by label
Loading
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Loading
Milestones
Filter by milestone
Loading
Reviews
Filter by reviews
No reviews Review required Approved review Changes requested
Assignee
Filter by who’s assigned
Assigned to nobody Loading
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Pull requests list

fix(security): Workspace admins can inject arbitrary members into any OTHER workspace via PUT /workspaces/{workspaceId}/permissionGroup, bypassing the invite flow (GHSA-h5qf-426x-5mv5) ok-to-test Required label for CI Security Issues related to information security within the product
#42023 opened Jul 21, 2026 by appsmith-smithes Bot Loading…
1 of 2 tasks
@subrata71
chore(deps): bump net.snowflake:snowflake-jdbc from 3.23.1 to 4.3.2 in /app/server Dependencies Pull requests that update a dependency file java Pull requests that update Java code
#42022 opened Jul 20, 2026 by dependabot Bot Loading…
fix(eval): preserve sibling params when Filepicker Binary data is passed to action run ok-to-test Required label for CI
#42021 opened Jul 20, 2026 by sebastianiv21 Contributor Loading…
1 of 2 tasks
4
docs(ci): replace stale workflow catalog with trigger reference
#42020 opened Jul 20, 2026 by wyattwalter Contributor Loading…
1 of 2 tasks
4
chore(deps): bump axios from 1.16.1 to 1.18.0 in /app/client Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
#42019 opened Jul 20, 2026 by dependabot Bot Loading…
fix(client): move expires_in field after scope in OAuth2 configuratio…
#42017 opened Jul 18, 2026 by SaifuddinM23 Loading…
1 of 2 tasks
1
4
fix: support dynamic body for form-urlencoded content type in REST API
#42016 opened Jul 18, 2026 by mmustafasenoglu Loading…
1
6
feat: block new Appsmith AI datasource creation and show deprecation banner Bug Something isn't working Button Widget Issues related to the button widget Critical This issue needs immediate attention. Drop everything else Enhancement New feature or request Generate Page Issures related to page generation Needs Triaging Needs attention from maintainers to triage ok-to-test Required label for CI Release Blocker This issue must be resolved before the release Table Widget Widgets & Accelerators Pod Issues related to widgets & Accelerators Widgets Product This label groups issues related to widgets
#42015 opened Jul 17, 2026 by salevine Contributor Loading…
1 task done
1
7
fix(deps): batch security update — 1 vulnerability ok-to-test Required label for CI
#42014 opened Jul 17, 2026 by appsmith-smithes Bot • Draft
1
fix(client): show wildcard frame-ancestors value as allow-everywhere in embed settings
#42013 opened Jul 17, 2026 by wyattwalter Contributor • Draft
57
fix(security): stop shipping a wildcard frame-ancestors default
#42012 opened Jul 17, 2026 by wyattwalter Contributor Loading…
2
fix(deps): upgrade @opentelemetry/core to v2 to fix CVE-2026-54285
#42009 opened Jul 17, 2026 by subrata71 Collaborator Loading…
1 of 2 tasks
4
fix: prevent partial rows in table pagination ok-to-test Required label for CI
#42008 opened Jul 17, 2026 by jiuyige Loading…
7 of 9 tasks
1
13
fix(security): validate uploaded file types by content with Apache Tika in the AI plugin
#42005 opened Jul 16, 2026 by wyattwalter Contributor Loading…
16
chore: use netty.version property instead of hardcoded version in mysqlPlugin
#41999 opened Jul 15, 2026 by khushalmajoka Loading…
1
4
feat(widgets): add label styling options to button widget Button Group widget Issue and enhancements related to the button group widget Button Widget Issues related to the button widget Community Reported issues reported by community members Enhancement New feature or request Icon Button Widget Issues related to the icon button widget JSON Form Issue / features related to the JSON form wiget Low An issue that is neither critical nor breaks a user flow Menu Button Widget Issues related to Menu Button widget ok-to-test Required label for CI Query Widgets & IDE Pod All issues related to Query, JS, Eval, Widgets & IDE Widgets & Accelerators Pod Issues related to widgets & Accelerators Widgets Product This label groups issues related to widgets
#41998 opened Jul 15, 2026 by amelia-c0n Contributor Loading…
1 of 2 tasks
1
@amelia-c0n
24
fix(security): prevent git import symlink path traversal → arbitrary file read/write (GHSA-fqwc-g9wm-5895) ok-to-test Required label for CI Security Issues related to information security within the product
#41993 opened Jul 14, 2026 by subrata71 Collaborator Loading…
1 of 2 tasks
5
chore(deps-dev): bump postcss-preset-env from 7.6.0 to 11.3.2 in /app/client Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code
#41991 opened Jul 13, 2026 by dependabot Bot Loading…
chore(deps): bump golang from 1.26.4-alpine to 1.26.5-alpine in /deploy/docker Dependencies Pull requests that update a dependency file Docker Issues related to docker
#41990 opened Jul 13, 2026 by dependabot Bot Loading…
chore(deps-dev): bump com.diffplug.spotless:spotless-maven-plugin from 3.0.0 to 3.8.0 in /app/server Dependencies Pull requests that update a dependency file java Pull requests that update Java code
#41989 opened Jul 13, 2026 by dependabot Bot Loading…
chore(deps): bump io.micrometer:micrometer-tracing-bridge-otel from 1.3.5 to 1.7.0 in /app/server Dependencies Pull requests that update a dependency file java Pull requests that update Java code
#41988 opened Jul 13, 2026 by dependabot Bot Loading…
chore(deps): bump com.oracle.database.jdbc:ojdbc8 from 21.9.0.0 to 23.26.2.0.0 in /app/server Dependencies Pull requests that update a dependency file java Pull requests that update Java code
#41987 opened Jul 13, 2026 by dependabot Bot Loading…
fix(workflows): use continue instead of break in close-labeler loop
#41986 opened Jul 13, 2026 by moosairfaan Loading…
1
1
fix: don't leak server host/IP in MySQL access-denied error message
#41984 opened Jul 13, 2026 by Mavi9412 Loading…
1 of 2 tasks
1
6
feat: embedded MCP server with user-scoped token authentication (#15383) Enhancement New feature or request ok-to-test Required label for CI Property Pane Issues related to the behaviour of the property pane UI Building Product Issues related to the UI Building experience
#41980 opened Jul 10, 2026 by salevine Contributor Loading…
1
100
ProTip! Filter pull requests by the default branch with base:release.