payloadcms/payload

View on GitHub

Payload is the open-source, fullstack Next.js framework, giving you instant backend superpowers. Get a full TypeScript backend and admin panel instantly. Use Payload as a headless CMS or for building powerful applications.

Stars: 44.8k
Forks: 4.2k
Open beginner issues: 6
Indexed issues: 452
Avg merge: 2d 21h
Merged PRs (30d): 53

Dominant language: TypeScript
License: MIT
Last GitHub push: Sep 18, 2026
Latest indexed: Sep 20, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: No beginner labels indexed

Beginner friendly Everything

Open All

452 open issues indexed

Form state: a re-render of the admin page replaces everything the editor has typed (initialState effect), and the merge strips the value that would restore it Open

area: ui Bug

Difficulty 4/5 3-5 days Newbie friendliness 72/100

payloadcms/payload#18220 · Opened Sep 20, 2026
traverseFields silently skips localized group/tab children when walking locale-resolved documents Open

area: core Bug invalid-reproduction status: needs-triage v3

Difficulty 3/5 1-2 days Newbie friendliness 72/100

payloadcms/payload#18217 · 1 comment · Opened Sep 19, 2026
filterOptions on a virtual: 'path.to.field' relationship/upload field is never applied in the list view's Where Builder filter dropdown Open

area: ui Bug status: needs-triage v3

Difficulty 2/5 1-3 hours Newbie friendliness 84/100

payloadcms/payload#18215 · 1 comment · Opened Sep 18, 2026
listSearchableFields: a nested array path searches correctly but the box says "Search by ID" (3.x) Open

Bug

Difficulty 3/5 1-2 days Newbie friendliness 78/100

payloadcms/payload#18201 · Opened Sep 17, 2026
Deleting a user leaves their document locks and preferences behind (Postgres): an ownerless lock crashes the edit view Open

Bug db: postgres

Difficulty 4/5 3-5 days Newbie friendliness 72/100

payloadcms/payload#18200 · 1 reaction · Opened Sep 17, 2026
Product documents are not appearing in Admin Trash view when trash: true is enabled Open

area: ui Bug invalid-reproduction status: needs-triage v3

Difficulty 3/5 1-2 days Newbie friendliness 55/100

payloadcms/payload#18192 · 2 comments · Opened Sep 16, 2026
plugin-cloud-storage: afterChange mutates the caller's `context` object and deletes `skipCloudStorage` from a copy — every following Local API upload with a reused `context` is silently skipped Open

Bug plugin: cloud-storage

Difficulty 3/5 1-2 days Newbie friendliness 72/100

payloadcms/payload#18191 · 2 comments · Opened Sep 16, 2026
Array fields: typing lag scales with the number of mounted rows. Collapsed rows mount all their fields, and every row label walks the whole form state on each keystroke Open

Bug

Difficulty 3/5 1-2 days Newbie friendliness 78/100

payloadcms/payload#18182 · 1 comment · Opened Sep 15, 2026
REST `where` on a localized field 500s when `localization.fallback: false` and no `?locale=` is sent (`req.locale` is null, `validateSearchParams` reads `.length`) Open

area: localization Bug

Difficulty 3/5 1-2 days Newbie friendliness 76/100

payloadcms/payload#18180 · Opened Sep 15, 2026
plugin-multi-tenant: an async `validate` override on the tenant field skips the plugin's required check (override not awaited) Open

Bug

Difficulty 2/5 1-3 hours Newbie friendliness 84/100

payloadcms/payload#18163 · Opened Sep 11, 2026
Account view crashes with "Cannot use 'in' operator to search for 'hidden' in undefined" on a minimal auth collection (3.89.0, Next 16.3.4) Open

area: ui Bug

Difficulty 3/5 1-2 days Newbie friendliness 68/100

payloadcms/payload#18162 · Opened Sep 11, 2026
Bulk upload: an interrupted upload is dropped from the retry queue and counted as a success Open

Bug

Difficulty 2/5 1-3 hours Newbie friendliness 85/100

payloadcms/payload#18161 · Opened Sep 11, 2026
db-postgres: removing an array row leaves its hasMany relationship rows in _rels at the vacated index; a later row appended there inherits them Open

Bug

payloadcms/payload#18160 · 1 reaction · 1 assignee · Opened Sep 10, 2026
GraphQL select projection drops sub-selections for aliased relationships and relationships nested in arrays/blocks Open

Bug

Difficulty 4/5 3-5 days Newbie friendliness 48/100

payloadcms/payload#18141 · 1 reaction · Opened Sep 9, 2026
Admin dashboard: breadcrumb select's combobox input has no accessible name (axe label, critical) Open

area: accessibility area: ui Bug

payloadcms/payload#18140 · 2 comments · 1 assignee · Opened Sep 9, 2026
Admin dashboard: dropdown indicator is focusable while aria-hidden (axe aria-hidden-focus, serious) Open

area: accessibility area: ui Bug

payloadcms/payload#18139 · 1 comment · 1 assignee · Opened Sep 9, 2026
Concurrent logins to the same account silently lose sessions (useSessions) Open

Bug

Difficulty 5/5 Over a week Newbie friendliness 38/100

payloadcms/payload#18132 · Opened Sep 8, 2026
plugin-multi-tenant: a refused save on the tenants collection clears the form in a production build (when no tenant is selected) Open

Bug

Difficulty 3/5 1-2 days Newbie friendliness 82/100

payloadcms/payload#18122 · Opened Sep 7, 2026
Function-based admin.hidden invalidates existing Lexical block relationships Open

- plugin: richtext-lexical - area: core - area: ui Bug

payloadcms/payload#18121 · 1 assignee · Opened Sep 7, 2026
bug: bulk edit drawer drops values from custom field components Open

area: ui plugin: seo Bug created-by: Contributor

Difficulty 3/5 1-2 days Newbie friendliness 84/100

payloadcms/payload#18116 · Opened Sep 7, 2026
Default `unlock` access lets any authenticated user unlock any other account (CVE-2026-11779) — and the access function receives no `data` Open

area: core Bug status: needs-triage v3

Difficulty 5/5 Over a week Newbie friendliness 42/100

payloadcms/payload#18110 · Opened Sep 6, 2026
List view relationship cells stuck on "<No Reference>": useIntersect keeps the first IntersectionObserver entry instead of the last Open

area: ui Bug

Difficulty 1/5 Under an hour Newbie friendliness 35/100

payloadcms/payload#18108 · 2 comments · Opened Sep 5, 2026
payload run reports success in four distinct failure modes, one of which dev-pushes to a remote database Open

Bug

payloadcms/payload#18086 · 2 comments · 1 assignee · Opened Sep 2, 2026
Query Presets: whole admin crashes (notNullString.trim is not a function) when a preset filters a hasMany relationship — Postgres numeric IDs Open

area: ui Bug invalid-reproduction v3

payloadcms/payload#18083 · 3 comments · 1 assignee · Opened Sep 2, 2026
payload.auth() / JWT strategy ignores locale when loading the user document Open

(Select all that apply) - area: core Bug

Difficulty 4/5 3-5 days Newbie friendliness 68/100

payloadcms/payload#18081 · Opened Sep 2, 2026
Authenticated me endpoint ignores the draft URL search parameter Open

area: core Bug

Difficulty 2/5 1-3 hours Newbie friendliness 88/100

payloadcms/payload#18072 · Opened Sep 1, 2026
Admin list filters: condition controls have no accessible names Open

Bug

Difficulty 2/5 1-3 hours Newbie friendliness 88/100

payloadcms/payload#18067 · 1 comment · Opened Aug 31, 2026
Errors on Admin during development from Next JS 16.3 with Cache Components Enabled Open

Bug

Difficulty 4/5 3-5 days Newbie friendliness 35/100

payloadcms/payload#18065 · 3 comments · 4 reactions · Opened Aug 31, 2026
plugin-mcp: updating a localized array in one locale breaks other locales when row ids are echoed from a read Open

Bug db: mongodb db: postgres db: sqlite plugin: mcp

payloadcms/payload#18063 · 1 assignee · Opened Aug 31, 2026
Globals: GET /api/globals/<slug>/versions returns 500 (TypeError in drizzle adapter) when versions are not enabled — findVersions has no guard Open

area: core Bug db-postgres

payloadcms/payload#18056 · 1 comment · 1 assignee · Opened Aug 30, 2026
Jobs wrap handler errors in TaskError / WorkflowError and drop the original stack trace Open

Bug

payloadcms/payload#18055 · 1 comment · 1 assignee · Opened Aug 30, 2026
Copy Locale Data breaks documents on Postgres when drafts are enabled and localized array/blocks rows exist (duplicate key pkey on the row id) Open

Bug

payloadcms/payload#18002 · 1 comment · 1 assignee · Opened Aug 28, 2026
Folder list view (FolderFileTable): show image thumbnails instead of the generic DocumentIcon Open

Bug

Difficulty 2/5 1-3 hours Newbie friendliness 86/100

payloadcms/payload#17964 · 1 reaction · Opened Aug 27, 2026
SVG upload rejected as "Invalid MIME type: application/xml." when the file starts with a DOCTYPE Open

area: core Bug

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

payloadcms/payload#17958 · Opened Aug 26, 2026
richtext-lexical: nested beforeValidate hooks never run for fields inside Blocks, Link, and Upload features Open

created-by: Payload team plugin: richtext-lexical

payloadcms/payload#17950 · 1 assignee · Opened Aug 26, 2026
live-preview: subscribe() silently returns the REST error body as the document when initialData has no id Open

Difficulty 3/5 1-2 days Newbie friendliness 68/100

payloadcms/payload#17938 · 1 comment · Opened Aug 25, 2026
Multipart parsing loses AsyncLocalStorage context in Cloudflare Workers Open

Difficulty 4/5 3-5 days Newbie friendliness 72/100

payloadcms/payload#17935 · Opened Aug 25, 2026
?joins=false is ignored over REST; the string is iterated character by character so no join is disabled Open

area: fields

Difficulty 2/5 1-3 hours Newbie friendliness 85/100

payloadcms/payload#17929 · Opened Aug 25, 2026
GET /api/access reports permission: true for an operation whose access function returned a query constraint Open

area: access-control

Difficulty 3/5 1-2 days Newbie friendliness 68/100

payloadcms/payload#17928 · 2 comments · Opened Aug 25, 2026
localizeStatus: locale:'all' queries with _status where-clause silently return 0 docs; generated types don't reflect per-locale shape Open

Difficulty 4/5 3-5 days Newbie friendliness 58/100

payloadcms/payload#17923 · 1 comment · Opened Aug 25, 2026
Bumping @types/pg duplicates drizzle-orm in node_modules (yarn node-modules linker), breaking TS builds Open

Difficulty 4/5 3-5 days Newbie friendliness 42/100

payloadcms/payload#17916 · Opened Aug 24, 2026
Localized _status field gives "document modfied" error due to incorrect stale check Open

area: ui db: mongodb status: needs-triage v3

Difficulty 4/5 3-5 days Newbie friendliness 52/100

payloadcms/payload#17914 · 1 comment · Opened Aug 24, 2026
Jobs: updateJobs leaks a Postgres transaction when db.updateJobs throws (no try/catch between beginTransaction and commitTransaction) — connections stuck 'idle in transaction' until the pool is exhausted Open

Difficulty 2/5 1-3 hours Newbie friendliness 72/100

payloadcms/payload#17912 · 1 comment · Opened Aug 24, 2026
withPayload: scope the client-hint header injection to the admin route instead of '/:path*' Open

Difficulty 4/5 3-5 days Newbie friendliness 55/100

payloadcms/payload#17906 · Opened Aug 23, 2026
Allow joins: false for collections without generated join fields Open

v4

Difficulty 2/5 1-3 hours Newbie friendliness 74/100

payloadcms/payload#17904 · 1 comment · Opened Aug 23, 2026
Conditional non-data layout fields do not make nested required fields optional in generated types Open

area: typescript

Difficulty 3/5 1-2 days Newbie friendliness 78/100

payloadcms/payload#17896 · Opened Aug 22, 2026
Lexical block silently loses array-field rows on remount (data loss) Open

`area: ui` `plugin: richtext-lexical`

Difficulty 3/5 1-2 days Newbie friendliness 75/100

payloadcms/payload#17894 · 1 reaction · Opened Aug 22, 2026
findVersionByID (collection and global) never runs sanitizeWhereQuery on the merged access-control where, unlike every other read operation Open

Difficulty 3/5 1-2 days Newbie friendliness 78/100

payloadcms/payload#17883 · 2 comments · Opened Aug 21, 2026
[plugin-import-export] Prefix labels being applied to row fields and unnamed/unlabelled group fields in export fields dropdown Open

area: ui status: needs-triage v3

Difficulty 2/5 1-3 hours Newbie friendliness 78/100

payloadcms/payload#17882 · Opened Aug 20, 2026
[plugin-ecommerce] Cart items with a variant skip stock and price validation in initiatePayment Open

plugin: ecommerce

Difficulty 2/5 1-3 hours Newbie friendliness 76/100

payloadcms/payload#17866 · Opened Aug 20, 2026

payloadcms/payload

Get new issues in your inbox