apache/shenyu

View on GitHub

Apache ShenYu is a Java native API Gateway for service proxy, protocol conversion and API governance.

Stars: 8.8k
Forks: 3.1k
Open beginner issues: 0
Indexed issues: 482
Avg merge: 5d 20h
Merged PRs (30d): 79

Dominant language: Java
License: Apache-2.0
Last GitHub push: Sep 19, 2026
Latest indexed: Sep 14, 2026
Contributing guide: No contributing guide
Code of conduct: Code of conduct
Beginner labels: good first issue

Beginner friendly Everything

Open All

117 beginner-friendly issues open

[BUG] MockPlugin NPE when httpStatusCode is null in MockHandle (unboxing null Integer to HttpStatus.valueOf) Open

plugin: mock priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 80/100

apache/shenyu#6882 · 1 comment · Opened Aug 4, 2026
[BUG] AbstractNodeDataChangedListener.onCommonChanged REFRESH stale-removal guarded by size> instead of diff — stale entries persist when |old|<=|new| Open

admin priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 82/100

apache/shenyu#6875 · 2 comments · Opened Aug 4, 2026
[BUG] DivideIngressParser protocol[i++] throws AIOOBE when protocol array shorter than endpoints Open

kubernetes priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

apache/shenyu#6864 · 1 comment · Opened Aug 4, 2026
[BUG] ContextPathParser concatenates null annotation value with /** — literal null/** rule condition Open

kubernetes priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

apache/shenyu#6863 · 1 comment · Opened Aug 4, 2026
[BUG] GrpcParser and DubboIngressParser NPE when referenced k8s Service has no Endpoints Open

kubernetes priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

apache/shenyu#6859 · 1 comment · Opened Aug 4, 2026
[BUG] — `ComposableSignService.skipSignExchange`: 3× `String.format` per signed request Open

plugin: sign priority: medium type: performance

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

apache/shenyu#6804 · 1 comment · Opened Aug 3, 2026
[BUG] — `AiTokenLimiterPlugin`: `chunk.split("\\r?\\n")` (3-char regex, no fast path) per SSE chunk Open

feature: plugin priority: medium type: performance

Difficulty 1/5 Under an hour Newbie friendliness 78/100

apache/shenyu#6801 · 1 comment · Opened Aug 3, 2026
[BUG] — `String.matches(...)` (Pattern.compile per call) per line per AI request/response (multiple sites) Open

priority: medium type: performance

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

apache/shenyu#6800 · 1 comment · Opened Aug 3, 2026
[BUG] — `WebClientMessageWriter`: no `doOnError`/`doOnCancel` on `chain.execute` → upstream response body Flux never drained on mid-chain error/cancel → connection pool leak Open

plugin: response priority: medium type: performance

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

apache/shenyu#6793 · 1 comment · Opened Aug 3, 2026
[BUG] Tars `clazz.getAnnotation(ShenyuTarsService.class)` NPE when annotation is on an interface/superclass Open

priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

apache/shenyu#6790 · 1 comment · Opened Aug 3, 2026
[BUG] WebSocket `registerMetaData` field is dead — metadata always registered despite default `false` Open

client: register priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 84/100

apache/shenyu#6788 · 1 comment · Opened Aug 3, 2026
[BUG] ConsulSyncDataService uses non-thread-safe HashMap for shared state accessed by 7 concurrent watcher threads Open

data-sync: consul priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

apache/shenyu#6783 · 1 comment · Opened Aug 3, 2026
[BUG] MemorySafeLinkedBlockingQueue.maxFreeMemory and rejector lack volatile/visibility Open

priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

apache/shenyu#6774 · 1 comment · Opened Aug 3, 2026
[BUG] ModifyResponsePlugin always parses and re-serializes response body as JSON even for header-only configurations Open

plugin: modify-response priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

apache/shenyu#6771 · 2 comments · Opened Aug 3, 2026
[BUG] HuaweiLtsLogConfig.equals() omits generic config fields, preventing re-initialization Open

priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

apache/shenyu#6766 · 1 comment · Opened Aug 3, 2026
[BUG] Multi-client consume forEach breaks on single selector failure Open

priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

apache/shenyu#6764 · 1 comment · Opened Aug 3, 2026
[BUG] Swallowed exceptions in close methods across logging clients Open

priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

apache/shenyu#6761 · 1 comment · Opened Aug 3, 2026
[BUG] Response transformer mutates response headers before validating body extraction Open

feature: plugin priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 74/100

apache/shenyu#6756 · 1 comment · Opened Aug 3, 2026
[BUG] removeRule destroys the wrong cache key, leaking stale ChatClients Open

feature: plugin priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

apache/shenyu#6755 · 1 comment · Opened Aug 3, 2026
[BUG] Sliding-window counts stale entries before cleanup, causing spurious rejection Open

priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

apache/shenyu#6754 · 1 comment · Opened Aug 3, 2026
[BUG] TcpBootstrapServer.shutdown never disposes the upstream ConnectionProvider (connection-pool leak) Open

priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

apache/shenyu#6753 · 1 comment · Opened Aug 3, 2026
[BUG] RequestConfigHelper.buildPath does not URL-encode path/query values Open

feature: plugin priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 74/100

apache/shenyu#6751 · 1 comment · Opened Aug 3, 2026
[BUG] MessageHandlingResult.getResponseBodyAsJson serializes MCP types with plain ObjectMapper (wrong serializer) Open

feature: plugin priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 74/100

apache/shenyu#6749 · 1 comment · Opened Aug 3, 2026
[BUG] handleMessageEndpoint builds JSON via String.format without escaping + default-charset bytes Open

feature: plugin priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 82/100

apache/shenyu#6748 · 1 comment · Opened Aug 3, 2026
[BUG] LoadbalancerUtils NPE on missing remoteAddress/method Open

priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

apache/shenyu#6742 · 1 comment · Opened Aug 3, 2026
[BUG] ApacheDubboPlugin NPE when DubboRuleHandle is absent/empty Open

plugin: apache-dubbo priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

apache/shenyu#6741 · 1 comment · Opened Aug 3, 2026
[BUG] SofaMetaDataHandler uses raw .equals on possibly-null fields → NPE Open

plugin: sofa priority: medium type: bug

Difficulty 1/5 Under an hour Newbie friendliness 84/100

apache/shenyu#6740 · 1 comment · Opened Aug 3, 2026
[BUG] SofaProxyService casts null RPC result placeholder to GenericObject Open

plugin: sofa priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

apache/shenyu#6739 · 1 comment · Opened Aug 3, 2026
[BUG] initPrx busy-spins on lock contention burning CPU Open

plugin: tars priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

apache/shenyu#6737 · 1 comment · Opened Aug 3, 2026
[BUG] Boolean tars parameter parsed via Byte.valueOf → NumberFormatException Open

plugin: tars priority: medium type: bug

Difficulty 1/5 Under an hour Newbie friendliness 82/100

apache/shenyu#6736 · 1 comment · Opened Aug 3, 2026
[BUG] p2c inflight counter leaks on downstream cancellation (no doOnCancel/doFinally) Open

plugin: divide priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 74/100

apache/shenyu#6733 · 1 comment · Opened Aug 3, 2026
[BUG] WebsocketDataHandler stores handlers in a static mutable EnumMap mutated by every constructor Open

data-sync: websocket priority: medium type: bug

Difficulty 1/5 Under an hour Newbie friendliness 78/100

apache/shenyu#6732 · 1 comment · Opened Aug 3, 2026
[BUG] ResponseDecorator double-releases the joined DataBuffer (IllegalReferenceCountException / pooled-buffer corruption) Open

priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 74/100

apache/shenyu#6722 · 1 comment · Opened Aug 3, 2026
[BUG] CrossFilter short-circuits OPTIONS preflight with 200 OK even for disallowed origins, bypassing the filter chain Open

priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

apache/shenyu#6720 · 1 comment · Opened Aug 3, 2026
[BUG] AlertReceiverServiceImpl.updateReceiver uses full updateByPrimaryKey, nulling omitted columns Open

admin priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

apache/shenyu#6711 · 1 comment · Opened Aug 3, 2026
[BUG] UpstreamCheckService.fetchUpstreamData stores a LinkedList in UPSTREAM_MAP, but submitJust assumes CopyOnWriteArrayList (CME risk) Open

admin priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

apache/shenyu#6704 · 1 comment · Opened Aug 3, 2026
[BUG] ProxySelectorServiceImpl.update NPE on null discoveryRel / handler / discovery Open

admin priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

apache/shenyu#6701 · 1 comment · Opened Aug 3, 2026
[BUG] DiscoveryUpstreamServiceImpl.fetchAll NPE on null handler / discovery / selector / plugin Open

admin priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 74/100

apache/shenyu#6700 · 1 comment · Opened Aug 3, 2026
[BUG] DiscoveryUpstreamServiceImpl.listAll NPE on null discoveryRel / selector / proxySelector Open

admin priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

apache/shenyu#6699 · 1 comment · Opened Aug 3, 2026
[BUG] ShenyuDictServiceImpl.importData missing @Transactional Open

admin priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

apache/shenyu#6697 · 1 comment · Opened Aug 3, 2026
[BUG] ProxySelectorServiceImpl.importData (both overloads) missing @Transactional Open

admin priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 82/100

apache/shenyu#6696 · 1 comment · Opened Aug 3, 2026
[BUG] DiscoveryUpstreamServiceImpl.importData silently writes null discoveryHandlerId Open

admin priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

apache/shenyu#6695 · 1 comment · Opened Aug 3, 2026
[BUG] ai-proxy-api-key mapper uses MySQL-only NOW(3), non-portable across dialects Open

admin priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 68/100

apache/shenyu#6693 · 1 comment · Opened Aug 3, 2026
[BUG] DataPermission pagination: count uses exact-name match while list uses LIKE → wrong totals Open

admin priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

apache/shenyu#6691 · 1 comment · Opened Aug 3, 2026
[BUG] app_auth.updateSelective WHERE clause omits namespace_id (cross-namespace update) Open

admin priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 74/100

apache/shenyu#6690 · 1 comment · Opened Aug 3, 2026
[BUG] meta_data.pathExistedExclude ignores namespace_id → cross-namespace false-positive path collision Open

admin priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

apache/shenyu#6689 · 1 comment · Opened Aug 3, 2026
[BUG] RegistryController.delete and NamespaceController.delete accept an empty id list, producing invalid `IN ()` SQL Open

admin priority: medium type: bug

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

apache/shenyu#6687 · 1 comment · Opened Aug 3, 2026
[CI] ci.yml build matrix fail-fast cancels sibling OS jobs; build job has no timeout-minutes Open

Difficulty 1/5 1-3 hours Newbie friendliness 78/100

apache/shenyu#6683 · 1 comment · Opened Aug 3, 2026
[BUG] — Storage e2e compose scripts reference a non-existent `healthcheck.sh` + wrong `h2` arg + no `set -e` Open

in: test priority: high type: build

Difficulty 2/5 1-3 hours Newbie friendliness 75/100

apache/shenyu#6681 · 1 comment · Opened Aug 3, 2026
[BUG] — `AiResponseTransformerPlugin`: `new ObjectMapper()` per response (two sites) Open

feature: plugin priority: high type: performance

Difficulty 2/5 1-3 hours Newbie friendliness 84/100

apache/shenyu#6670 · 1 comment · Opened Aug 3, 2026

apache/shenyu

Get new issues in your inbox