Issues

• OAuth login CSRF via static (non-nonce) state parameter

  yourselfhosted/slash#510 · Filter by author carfeii opened on Oct 31, 2026

• Stored XSS and workspace-metadata disclosure in SSR link previews (/s/{name}, /c/{name}): unescaped member-controlled title/description in <head>

  yourselfhosted/slash#509 · Filter by author HieuPenguinnn opened on Oct 30, 2026

• Slash is listed on awesome-alternatives

  yourselfhosted/slash#508 · Filter by author BryanFRD opened on Oct 7, 2026

• Missing Ownership Check on GetShortcutAnalytics Discloses Any User's Shortcut Referrer and Device Data

  yourselfhosted/slash#506 · Filter by author carfeii opened on Sep 16, 2026

• How to get the Slash version?

  enhancement
  yourselfhosted/slash#503 · Filter by author towerstreet opened on May 13, 2026
  1

• STOP LOADING REACT FOR A REDIRECT

  yourselfhosted/slash#502 · Filter by author 320kg opened on Mar 22, 2026

• Security: Multiple IDOR in Shortcut Analytics and User Settings (CWE-639)

  yourselfhosted/slash#500 · Filter by author lighthousekeeper1212 opened on Feb 25, 2026

• Make the app installable

  enhancement
  yourselfhosted/slash#498 · Filter by author aminnairi opened on Feb 15, 2026

• Doesn't work with Arc browser

  bug
  yourselfhosted/slash#495 · Filter by author henryxrl opened on Dec 17, 2025

• error page : Password auth is not allowed

  bug
  yourselfhosted/slash#494 · Filter by author jgitcot opened on Dec 12, 2025

• Better navigation card style

  enhancement
  yourselfhosted/slash#490 · Filter by author XJY00 opened on Oct 14, 2025

• API for automation

  enhancement
  yourselfhosted/slash#474 · Filter by author TriHydera opened on Sep 11, 2025

• [Compatibility with Microsoft Edge] s didn’t send any data. ERR_EMPTY_RESPONSE

  yourselfhosted/slash#458 · Filter by author JooDye opened on Sep 1, 2025

• mailto: links open blank tab, don't launch email client

  yourselfhosted/slash#431 · Filter by author srmdn opened on Jun 8, 2025
  

• Set visibility to Private, Workspace or Public

  enhancement
  yourselfhosted/slash#430 · Filter by author johmut opened on Jun 2, 2025

• Aliases!

  enhancement
  yourselfhosted/slash#414 · Filter by author mattfreeman1701 opened on May 31, 2025
  1

• Self host on prem + configure base domain

  yourselfhosted/slash#387 · Filter by author jeremych1000 opened on Mar 27, 2025

• Support browser extension for Brave on Windows

  enhancement
  yourselfhosted/slash#385 · Filter by author rahji opened on Mar 16, 2025

• Kubernetes - Port is 0 / Slash not starting

  bug
  yourselfhosted/slash#384 · Filter by author thxrben opened on Mar 4, 2025
  1

• Allow the addition of various types of links to Collections based on tags

  enhancement
  yourselfhosted/slash#77 · Filter by author Narrron opened on Apr 3, 2024

• Search by s/

  enhancement
  yourselfhosted/slash#68 · Filter by author madcoda9000 opened on Mar 2, 2024
  2

• Favicon provider/upload

  enhancement
  yourselfhosted/slash#45 · Filter by author webysther opened on Nov 16, 2023
  1

• PWA + share_target

  enhancement
  yourselfhosted/slash#31 · Filter by author benjick opened on Sep 4, 2023
  2

• Browser extension for Safari

  enhancement
  yourselfhosted/slash#27 · Filter by author cnaron opened on Aug 22, 2023
  1

• Option to not have the /s/ in the url

  enhancement
  yourselfhosted/slash#5 · Filter by author liamlah opened on Jul 22, 2023
  16