Issues

• SimpleLogin silently dropping email

  simple-login/app#2821 · Filter by author pauladams8 opened on Sep 29, 2026
  1

• Newer versions of pyotp have increased default length of otp_secret

  simple-login/app#2819 · Filter by author Marcool04 opened on Sep 29, 2026

• Integrate Pingpay for crypto payments

  simple-login/app#2807 · Filter by author jaswinder6991 opened on Sep 9, 2026

• Option to forward to I2P Mail instead of clearnet

  simple-login/app#2806 · Filter by author shrimprugbysnowowl opened on Sep 8, 2026

• uv.lock can silently resolve protobuf incompatible with generated event_pb2.py (ImportError: runtime_version)

  simple-login/app#2797 · Filter by author chrisblech opened on Aug 25, 2026

• Ssenfuma app - WhatsApp Integration Bug

  simple-login/app#2794 · Filter by author ssenfumatom832-bit opened on Aug 22, 2026
  1

• Bug: forwarded emails with quoted-printable body are corrupted in strict MIME clients (Outlook)

  simple-login/app#2758 · Filter by author Flyingfufu opened on Jun 18, 2026

• Null byte in token endpoint parameters (code / client_id) triggers HTTP 500 instead of OAuth error response

  simple-login/app#2755 · Filter by author Allen-wick opened on Jun 11, 2026

• Authorization code value echoed in token endpoint error messages

  simple-login/app#2754 · Filter by author Allen-wick opened on Jun 11, 2026

• Token response includes non-standard "user" PII field (resolves existing TODO)

  simple-login/app#2753 · Filter by author Allen-wick opened on Jun 11, 2026

• Fragile and non-RFC-compliant Bearer token parsing in UserInfo endpoint

  simple-login/app#2752 · Filter by author Allen-wick opened on Jun 11, 2026

• Token endpoint accepts GET requests (RFC 6749 §3.2 violation)

  simple-login/app#2751 · Filter by author Allen-wick opened on Jun 11, 2026

• State parameter not URL-encoded in authorization deny redirect (Parameter Injection risk)

  simple-login/app#2750 · Filter by author Allen-wick opened on Jun 11, 2026

• OAuth scope parameter is not validated against client's allowed scopes

  simple-login/app#2749 · Filter by author Allen-wick opened on Jun 11, 2026

• Fully open CORS (@cross_origin()) on sensitive OAuth endpoints

  simple-login/app#2748 · Filter by author Allen-wick opened on Jun 11, 2026

• Undocumented /oauth/ attack surface (Double Blueprint Registration)

  simple-login/app#2747 · Filter by author Allen-wick opened on Jun 11, 2026

• Dkim Selector value should be read from os environ. to facilitate changing the selector in simplelogin.env

  simple-login/app#2742 · Filter by author Wolf1098 opened on Jun 4, 2026
  6

• "Performing the extension setup..." frozen after login

  simple-login/app#2739 · Filter by author jkcbaqze opened on May 31, 2026
  5

• (Paid) account forwarding disabled with minimal warning

  simple-login/app#2733 · Filter by author cdman opened on May 25, 2026

• SMIME support

  simple-login/app#2729 · Filter by author 1inh opened on May 17, 2026

• App

  simple-login/app#2711 · Filter by author Wesleyofornazari-spec opened on Apr 24, 2026

• App financeiro

  simple-login/app#2710 · Filter by author Wesleyofornazari-spec opened on Apr 24, 2026

• translation

  simple-login/app#2708 · Filter by author cayenne17 opened on Apr 17, 2026

• Add an option to include the forwarding address in the header "To:" field or subject line

  simple-login/app#2702 · Filter by author Gnorizo opened on Apr 1, 2026

• Is there an easy way to convert a website into an app?

  simple-login/app#2693 · Filter by author dremarttools opened on Mar 17, 2026