Issues

• match_body: a secret after a body miss is never swapped

  paradigmxyz/iron-proxy#280 · Filter by author kvdb opened on Oct 13, 2026

• Secrets transform swaps secrets on plain HTTP; no way to require TLS or turn off the HTTP listener

  paradigmxyz/iron-proxy#278 · Filter by author anotherstarburst opened on Oct 10, 2026

• WebSocket over MITM: client disconnect never reaches upstream; session is not audited until upstream closes

  paradigmxyz/iron-proxy#272 · Filter by author olesho opened on Oct 4, 2026

• oauth_token refresh_token grant: every refresh after the first fails with "context canceled"

  paradigmxyz/iron-proxy#271 · Filter by author olesho opened on Oct 4, 2026

• Request bodies over max_request_body_bytes are truncated, not forwarded, when a transform reads the body

  paradigmxyz/iron-proxy#270 · Filter by author olesho opened on Oct 4, 2026

• Dependency advisories still open on v0.52.0 (grpc, x/crypto, otel log, go-archive)

  paradigmxyz/iron-proxy#269 · Filter by author glifocat opened on Oct 1, 2026

• Empty Body Forwarded on GET Requests

  paradigmxyz/iron-proxy#246 · Filter by author iwinux opened on Sep 8, 2026

• Sign published OCI images and pin the release base image

  paradigmxyz/iron-proxy#232 · Filter by author shawnkoh opened on Aug 14, 2026
  1

• Rejections return a zero-length 403 body, so a sandboxed client cannot tell a policy denial from a dead credential

  paradigmxyz/iron-proxy#230 · Filter by author kvdb opened on Aug 12, 2026

• secrets transform with require: true rejects the synthetic CONNECT — mapped hosts unreachable via tunnel (same defect class as the aws_auth fix)

  paradigmxyz/iron-proxy#222 · Filter by author brAIsLabs opened on Aug 7, 2026
  1

• aws_auth: SigV4 re-sign 403s on S3 keys containing spaces (signer double-escapes the URL path)

  paradigmxyz/iron-proxy#220 · Filter by author KieranChambers opened on Aug 5, 2026
  2

• Cannot use same database name for multiple PostgreSQL upstreams

  paradigmxyz/iron-proxy#211 · Filter by author cpburnz opened on Jul 21, 2026
  1