TykTechnologies/tyk

View on GitHub

Tyk Open Source API Gateway written in Go, supporting REST, GraphQL, TCP and gRPC protocols

Stars: 10.8k
Forks: 1.2k
Open beginner issues: 0
Indexed issues: 186
Avg merge: 1d 10h
Merged PRs (30d): 50

Dominant language: Go
License: No license data
Last GitHub push: Sep 18, 2026
Latest indexed: Sep 19, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: help wanted

Beginner friendly Everything

Open All

186 open issues indexed

Python coprocess segfaults on the first dispatched request under CPython 3.12 Open

bug external

Difficulty 4/5 3-5 days Newbie friendliness 45/100

TykTechnologies/tyk#8710 · 1 comment · 1 reaction · Opened Sep 17, 2026
OTel: successful plugin-terminated requests (`StatusRespond`) are recorded as span status Error ("response succeed") Open

bug external

Difficulty 3/5 1-2 days Newbie friendliness 76/100

TykTechnologies/tyk#8684 · 2 comments · 1 reaction · Opened Sep 8, 2026
Security disclosure: request for a private reporting channel Open

bug external question

Difficulty 5/5 Over a week Newbie friendliness 25/100

TykTechnologies/tyk#8558 · 1 comment · 1 reaction · Opened Aug 9, 2026
Security disclosure: request for a private reporting channel Open

bug external question

Difficulty 5/5 Over a week Newbie friendliness 25/100

TykTechnologies/tyk#8557 · 1 comment · 1 reaction · Opened Aug 9, 2026
Low-privilege MCP consumer bypasses Tool-Based Access Control via Content-Type case differential Open

bug external

Difficulty 3/5 1-2 days Newbie friendliness 68/100

TykTechnologies/tyk#8539 · 1 comment · 1 reaction · Opened Aug 4, 2026
Extend GraphQL Field-Based Permissions to support Input Types (⁠INPUT_OBJECT⁠) Open

enhancement external feature

Difficulty 5/5 Over a week Newbie friendliness 45/100

TykTechnologies/tyk#8538 · 1 comment · 1 reaction · Opened Aug 4, 2026
Bug: maxLatencyWriter panics on hijacked connections with OpenTelemetry enabled Open

bug external

Difficulty 4/5 3-5 days Newbie friendliness 52/100

TykTechnologies/tyk#8489 · 1 comment · 1 reaction · Opened Jul 13, 2026
Add non-cloning ctx.GetOASDefinitionRaw accessor for read-only hot paths Open

enhancement external

Difficulty 3/5 1-2 days Newbie friendliness 68/100

TykTechnologies/tyk#8484 · 2 comments · 1 reaction · Opened Jul 13, 2026
Add opt-in request body passthrough to avoid buffering large uploads Open

enhancement external feature

Difficulty 4/5 3-5 days Newbie friendliness 48/100

TykTechnologies/tyk#8483 · 3 comments · 2 reactions · Opened Jul 13, 2026
OAS 3.1 import rejects default FastAPI/Pydantic output: lookahead `pattern` on Decimal fields fails RE2 compile (invalid or unsupported Perl syntax: (?!) Open

bug external

Difficulty 4/5 3-5 days Newbie friendliness 48/100

TykTechnologies/tyk#8321 · 1 comment · 1 reaction · Opened Jun 16, 2026
Bug: Critical data loss in RPC analytics purger when MDCB is unstable Open

bug external

Difficulty 3/5 1-2 days Newbie friendliness 55/100

TykTechnologies/tyk#8301 · 1 comment · 1 reaction · Opened Jun 9, 2026
Bug: JSVM TykMakeHttpRequest and TykBatchRequest panic with nil pointer dereference during API reload (Race Condition) Open

bug external

Difficulty 4/5 3-5 days Newbie friendliness 48/100

TykTechnologies/tyk#8285 · 2 comments · 1 reaction · Opened Jun 8, 2026
[bug] Go-plugin intentional reject (4xx/5xx) emits unconditional level=error log spam — extend existing errpack pattern to fix Open

bug external

Difficulty 3/5 1-2 days Newbie friendliness 68/100

TykTechnologies/tyk#8245 · 1 comment · 1 reaction · Opened May 25, 2026
goplugin: analytics RawResponse is a zero-value HTTP response for plugin-rejected requests (status >= 400) Open

bug external

Difficulty 4/5 3-5 days Newbie friendliness 55/100

TykTechnologies/tyk#8242 · 1 comment · 1 reaction · Opened May 21, 2026
Feature Request: Add Endpoints field to coprocess_session_state.proto Open

enhancement external

Difficulty 3/5 1-2 days Newbie friendliness 68/100

TykTechnologies/tyk#8231 · 1 comment · 1 reaction · Opened May 15, 2026
[TT-17743] Emit RFC 9429-compliant rate limit headers Open

enhancement external

Difficulty 3/5 1-2 days Newbie friendliness 55/100

TykTechnologies/tyk#8192 · 1 comment · 2 reactions · Opened May 8, 2026
Add `Retry-After` header and use `429` status code on quota-exceeded responses Open

enhancement external

Difficulty 4/5 3-5 days Newbie friendliness 48/100

TykTechnologies/tyk#8191 · 2 comments · 4 reactions · Opened May 8, 2026
Vulnerability in tyk project Open

bug external

Difficulty 3/5 1-2 days Newbie friendliness 45/100

TykTechnologies/tyk#8147 · 1 comment · 1 reaction · Opened Apr 23, 2026
Hardcoded version string in /hello status response Open

bug external

Difficulty 3/5 1-2 days Newbie friendliness 55/100

TykTechnologies/tyk#7983 · 1 comment · 1 reaction · Opened Apr 9, 2026
trace-id missing in analytics records tags in error responses Open

bug external

Difficulty 2/5 1-3 hours Newbie friendliness 74/100

TykTechnologies/tyk#7928 · 2 comments · 1 reaction · Opened Mar 26, 2026
Date header is only added during request signing if the header list is empty Open

bug external

Difficulty 3/5 1-2 days Newbie friendliness 55/100

TykTechnologies/tyk#7926 · 1 comment · 1 reaction · Opened Mar 25, 2026
Oauth token - date_created not filled on key Open

bug external

Difficulty 2/5 1-3 hours Newbie friendliness 58/100

TykTechnologies/tyk#7917 · 1 comment · 1 reaction · Opened Mar 23, 2026
GraphQL Federation: entity resolution fails for heterogeneous arrays where items have different nullable federated fields Open

bug external

Difficulty 4/5 3-5 days Newbie friendliness 45/100

TykTechnologies/tyk#7883 · 2 comments · 1 reaction · Opened Mar 12, 2026
https://github.com/TykTechnologies/tyk/issues/new/choose Open

bug external invalid

Difficulty 5/5 Over a week Newbie friendliness 5/100

TykTechnologies/tyk#7817 · 1 comment · 1 reaction · Opened Feb 26, 2026
Upstream TLS connections forced to TLS 1.2 due to incorrect SSLMaxVersion default and inverted condition Open

bug external

Difficulty 4/5 3-5 days Newbie friendliness 48/100

TykTechnologies/tyk#7798 · 1 comment · 1 reaction · Opened Feb 21, 2026
Tyk v5.11.0 CVEs Open

bug external

Difficulty 4/5 3-5 days Newbie friendliness 25/100

TykTechnologies/tyk#7787 · 1 comment · 1 reaction · Opened Feb 17, 2026
[Security/Maintenance] Upgrade Go version from 1.24 to 1.26 (1.24 is End of Life) Open

chore enhancement external

Difficulty 3/5 1-2 days Newbie friendliness 35/100

TykTechnologies/tyk#7786 · 1 comment · 1 reaction · Opened Feb 17, 2026
Add per-API option to disable upstream chunked transfer encoding by buffering in Tyk (with safe defaults) Open

enhancement external

Difficulty 5/5 Over a week Newbie friendliness 35/100

TykTechnologies/tyk#7754 · 1 comment · 3 reactions · Opened Feb 9, 2026
debian 13 install error Open

bug external

Difficulty 4/5 3-5 days Newbie friendliness 35/100

TykTechnologies/tyk#7710 · 1 comment · 1 reaction · Opened Jan 29, 2026
Utilize `override_messages` in JWT authentication middleware Open

enhancement external

Difficulty 3/5 1-2 days Newbie friendliness 48/100

TykTechnologies/tyk#7687 · 1 comment · 1 reaction · Opened Jan 22, 2026
Upgrade Go dependencies (x/crypto, paho.mqtt.golang) Open

bug chore external

Difficulty 2/5 1-3 hours Newbie friendliness 55/100

TykTechnologies/tyk#7654 · 1 comment · 1 reaction · Opened Dec 27, 2025
Federation multiple keys issue Open

bug external

Difficulty 4/5 3-5 days Newbie friendliness 35/100

TykTechnologies/tyk#7653 · 1 comment · 1 reaction · Opened Dec 25, 2025
JWT panic in concurrent access Open

bug external

Difficulty 4/5 3-5 days Newbie friendliness 25/100

TykTechnologies/tyk#7573 · 15 comments · 1 reaction · Opened Nov 27, 2025
Nonce failed issue Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

TykTechnologies/tyk#7521 · 1 comment · 1 reaction · Opened Nov 6, 2025
JWT Parsing Failure - potential Base64 encoding issue Open

bug external

Difficulty 4/5 3-5 days Newbie friendliness 45/100

TykTechnologies/tyk#7461 · 7 comments · 4 reactions · Opened Oct 15, 2025
Classic api definition changes overrule OAS API definition loading from file-based directory Open

bug external

Difficulty 4/5 3-5 days Newbie friendliness 32/100

TykTechnologies/tyk#7460 · 4 comments · 1 reaction · Opened Oct 15, 2025
All the timeouts used in the code Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

TykTechnologies/tyk#7435 · 7 comments · Opened Oct 9, 2025
Inefficient DNS change detection causes unnecessary RPC retries and request blocking Open

Difficulty 5/5 Over a week Newbie friendliness 25/100

TykTechnologies/tyk#7433 · 1 comment · Opened Oct 9, 2025
Nil Pointer Panic on reconnect - Not handling onConnect being nil Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 45/100

TykTechnologies/tyk#7355 · 2 comments · 1 reaction · Opened Sep 15, 2025
Oauth2 Authorization Code Grant: auth_code is empty in notification weekhook when client refresh token Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

TykTechnologies/tyk#7308 · 2 comments · Opened Aug 15, 2025
[TT-17663] Analytics timestamp records request completion time, not arrival time Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 52/100

TykTechnologies/tyk#7273 · Opened Aug 5, 2025
Feature Request: Plugin Shutdown Hooks for Graceful Resource Cleanup Open

enhancement

Difficulty 5/5 Over a week Newbie friendliness 25/100

TykTechnologies/tyk#7250 · 1 reaction · Opened Jul 24, 2025
Cookie based hmac auth is impossible Open

Difficulty 3/5 1-2 days Newbie friendliness 35/100

TykTechnologies/tyk#7247 · 2 comments · Opened Jul 22, 2025
BaseMiddleware is nil when using endpoint-level custom Go plugin (but plugin still works) Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 38/100

TykTechnologies/tyk#7239 · 6 comments · 1 reaction · Opened Jul 17, 2025
SSE not working if content_type header has charset indication Open

bug

Difficulty 2/5 1-3 hours Newbie friendliness 55/100

TykTechnologies/tyk#7238 · 1 reaction · Opened Jul 17, 2025
Adjustable sleep duration when SIGTERM received Open

enhancement

Difficulty 4/5 3-5 days Newbie friendliness 35/100

TykTechnologies/tyk#7210 · 2 comments · Opened Jul 9, 2025
Custom Go Plugin (.so) Not Persisting in Middleware Directory via InitContainer (Helm/K8s) Open

bug

Difficulty 4/5 3-5 days Newbie friendliness 25/100

TykTechnologies/tyk#7200 · Opened Jul 4, 2025
Build version 5.8.2 Open

Difficulty 4/5 3-5 days Newbie friendliness 25/100

TykTechnologies/tyk#7180 · 2 comments · Opened Jul 1, 2025
tykio/tyk-gateway:v5.7 contains vulnerable Vault dependency Open

bug

Difficulty 3/5 1-2 days Newbie friendliness 35/100

TykTechnologies/tyk#7155 · 7 comments · Opened Jun 27, 2025
[DX-2021] Missing environment variable name for override_messages in documentation Open

TykTechnologies/tyk#7070 · 3 comments · 1 assignee · Opened May 22, 2025

TykTechnologies/tyk

Get new issues in your inbox