Issues

• BusyBox RPM package not matched to CVE-2022-28391 although CVE and advisory data exist

  bug
  l3montree-dev/devguard#3175 · Filter by author tscdeu opened on Oct 8, 2026

• SBOM Upload on Vuln DB doesn't work

  bug
  l3montree-dev/devguard#3172 · Filter by author l3monKenji opened on Oct 7, 2026
  1

• Previously generated user tokens cannot be managed in the user settings

  bugcomponent/devguard-apipriority:high
  l3montree-dev/devguard#3161 · Filter by author refoo0 opened on Oct 6, 2026

• External entity sync - in case where tokens expired the frontned does not redirect to /<entity>/oauth2error

  bugcomponent/devguard-apicomponent/devguard-webpriority:high
  l3montree-dev/devguard#3160 · Filter by author seb-kw opened on Oct 6, 2026

• Input Validation for Org, Group and Asset names

  component/devguard-apicomponent/devguard-webpriority:low
  l3montree-dev/devguard#3159 · Filter by author Ph4t3 opened on Oct 6, 2026
  

• Truncate group name in project view

  component/devguard-webgood first issue
  l3montree-dev/devguard#3158 · Filter by author Ph4t3 opened on Oct 6, 2026
  

• Calculation of Vulnerabilities in Overview seems to be wrong

  bug
  l3montree-dev/devguard#3157 · Filter by author l3monKenji opened on Oct 5, 2026

• Cleanup Page component

  component/devguard-webpriority:low
  l3montree-dev/devguard#3156 · Filter by author Ph4t3 opened on Oct 5, 2026
  

• Add --upstreamVCS and --upstreamPURL flag to the devguard-scanner

  component/devguard-scannerpriority:high
  l3montree-dev/devguard#3153 · Filter by author timbastin opened on Oct 2, 2026
  1

  

• Instance Admin Dashboard Stats - add count of assets that have a sbom

  component/devguard-apicomponent/devguard-web
  l3montree-dev/devguard#3152 · Filter by author seb-kw opened on Oct 2, 2026

• Dependency Proxy: Need option to exclude packages from min release age

  component/dependency-proxycomponent/devguard-api
  l3montree-dev/devguard#3150 · Filter by author seb-kw opened on Oct 2, 2026
  1

• Escape HTML in markdown content sent to issue trackers?

  component/devguard-api
  l3montree-dev/devguard#3149 · Filter by author Xenira opened on Oct 2, 2026

• Support custom external entity provider IDs at all places

  bugcomponent/devguard-apicomponent/devguard-webpriority:high
  l3montree-dev/devguard#3124 · Filter by author eliashaeussler opened on Sep 30, 2026
  

• Make devguard a Dependency Ingestion Platform in SLSA terms

  component/dependency-proxycomponent/devguard-api
  l3montree-dev/devguard#3109 · Filter by author timbastin opened on Sep 29, 2026

• Add "Please Update" dialog to devguard is the version is outdated

  component/devguard-webgood first issue
  l3montree-dev/devguard#3105 · Filter by author timbastin opened on Sep 29, 2026
  

• Dependency proxy should support CEL rules instead of gitignore style rules

  component/dependency-proxy
  l3montree-dev/devguard#3104 · Filter by author timbastin opened on Sep 29, 2026
  1

  

• Remove dependency graph page and react flow dependency

  component/devguard-web
  l3montree-dev/devguard#3103 · Filter by author timbastin opened on Sep 29, 2026
  

• PostgreSQL should be compatible with PG-Operator (https://cloudnative-pg.io/blog/building-images-bake/)

  l3montree-dev/devguard#3102 · Filter by author timbastin opened on Sep 29, 2026
  

• Feedback for page /how-to-guides/administration/restricting-access/

  component/devguard-documentationpriority:high
  l3montree-dev/devguard#3101 · Filter by author devguard-bot opened on Sep 29, 2026

• Redmine Integration

  feature-request
  l3montree-dev/devguard#3099 · Filter by author Xenira opened on Sep 28, 2026
  8

• Return better error when trying to create an asset with an project access token

  bugcomponent/devguard-api
  l3montree-dev/devguard#3098 · Filter by author timbastin opened on Sep 28, 2026

• Vulnerability (CVE) Dashboard

  component/devguard-apicomponent/devguard-webfeature-request
  l3montree-dev/devguard#3095 · Filter by author knoobie opened on Sep 26, 2026
  1

• GHSA-2v4p-qf9q-27wj found in golang/google.golang.org/grpc@v1.80.0

  cvss-severity:highdevguardl3montree-cybersecurity/...ard-k8s-image-inventorypkg:oci/devguard-k8s-ima...ch=amd64&tag=main-amd64pkg:oci/devguard-k8s-ima...ch=arm64&tag=main-arm64risk:lowstate:open
  l3montree-dev/devguard#3094 · Filter by author devguard-bot-dev opened on Sep 26, 2026
  1

• Show unique CVE counts alongside per-artifact findings in the dashboard

  component/devguard-apicomponent/devguard-webfeature-requestpartner
  l3montree-dev/devguard#3091 · Filter by author MSOnderhu opened on Sep 25, 2026
  

• Clarify VEX reopen rule documentation

  component/devguard-documentation
  l3montree-dev/devguard#3090 · Filter by author refoo0 opened on Sep 25, 2026