Issues

• Calendar views return 500 for a non-numeric lead filter value

  DefectDojo/django-DefectDojo#16842 · Filter by author Maffooch opened on Nov 13, 2026
  

• uWSGI memory grows to 8-11 GB and gets OOM-killed during large API finding imports on 3.5.x

  bug
  DefectDojo/django-DefectDojo#16818 · Filter by author mareban opened on Nov 12, 2026
  1

• Race condition in ReImportScanView/AutoCreateContextManager.get_target_test_if_exists() creates duplicate Tests under concurrent reimport-scan calls

  bug
  DefectDojo/django-DefectDojo#16807 · Filter by author gruntz opened on Nov 12, 2026
  1

• Different Jira closing transition ids lead to faulty payload

  bug
  DefectDojo/django-DefectDojo#16792 · Filter by author chkoelbl opened on Nov 11, 2026

• Xray Import results in wrong component name & version

  bug
  DefectDojo/django-DefectDojo#16791 · Filter by author chkoelbl opened on Nov 11, 2026

• Hosts view shows one row per location instead of one per host for non-superusers when V3_FEATURE_LOCATIONS is enabled

  bug
  DefectDojo/django-DefectDojo#16739 · Filter by author Jino-T opened on Nov 9, 2026

• [performance] import-scan: 3,000 Generic findings take ~4 min synchronously in the request (2 writes + 2 auditlog rows + ~6 commits per finding)

  DefectDojo/django-DefectDojo#16730 · Filter by author Ludocius opened on Nov 7, 2026

• [performance] API ?prefetch= serializes related objects per entry: /api/v2/findings/?limit=100&prefetch=test goes from 122 to 423 queries

  DefectDojo/django-DefectDojo#16729 · Filter by author Ludocius opened on Nov 7, 2026

• [performance] Findings list UI loads one Endpoint per row: status_finding is prefetched but status_finding__endpoint is not (83 queries for 25 rows, 155 for 100)

  DefectDojo/django-DefectDojo#16728 · Filter by author Ludocius opened on Nov 7, 2026
  1

• [performance] GET /api/v2/products/ runs 7 queries per product and returns every active finding id (findings_list / open_findings_list)

  DefectDojo/django-DefectDojo#16727 · Filter by author Ludocius opened on Nov 7, 2026

• [performance] GET /api/v2/test_imports/ serializes every Test_Import_Finding_Action inline: 7.5 s / 830 KB for 2 imports, 20 concurrent requests time out and push uWSGI to 2.2 GB

  DefectDojo/django-DefectDojo#16726 · Filter by author Ludocius opened on Nov 7, 2026
  1

• Export Functionality Memory Consumption issue - Export findings causes excess uWSGI memory utilization

  bug
  DefectDojo/django-DefectDojo#16704 · Filter by author ChrisAAAllard opened on Nov 5, 2026
  3

• GET /api/v2/findings/ runs one dojo_findingvulnerabilityreference query per finding (missing vulnerability_id_prefetch() in FindingViewSet)

  bug
  DefectDojo/django-DefectDojo#16652 · Filter by author jensholdgaard opened on Oct 31, 2026
  1

• Qualys XML parser crashes when a QID has no glossary entry

  DefectDojo/django-DefectDojo#16633 · Filter by author Maffooch opened on Oct 30, 2026
  

• support copying pictures directly.

  DefectDojo/django-DefectDojo#16621 · Filter by author moyuwa opened on Oct 29, 2026

• OSV Scan parser: severity always 'Low' unless database_specific.severity is set (CVSS in severity[] / max_severity ignored)

  DefectDojo/django-DefectDojo#16516 · Filter by author alink-tothepast opened on Oct 23, 2026
  1

• NMAP Scan Import: An exception error occurred during the report import: 'NoneType' object is not iterable

  bug
  DefectDojo/django-DefectDojo#16410 · Filter by author IlabSentuser opened on Oct 19, 2026
  2

• Flaky test: test_dedupe_delete_commit_race.test_duplicate_of_a_test_just_reimported_is_deleted_once_the_import_has_ended intermittently fails in the merge queue

  DefectDojo/django-DefectDojo#16396 · Filter by author Maffooch opened on Oct 17, 2026

• Reassess or lazy-load Experimental Simple Search results

  DefectDojo/django-DefectDojo#16376 · Filter by author fopinappb opened on Oct 16, 2026

• Feature request: filter scan results by host operating system

  enhancement
  DefectDojo/django-DefectDojo#16281 · Filter by author antoniovergura opened on Oct 9, 2026
  1

• Difference between Sonarqube Scan and Sonarqube API Scan import 'name' column in the findings dashboard

  enhancement
  DefectDojo/django-DefectDojo#16115 · Filter by author Rushhourtester opened on Sep 28, 2026

• Trivy Operator Scan parser embeds volatile ReplicaSet name into service, permanently breaking close_old_findings

  DefectDojo/django-DefectDojo#16026 · Filter by author tallesgois-shipay opened on Sep 21, 2026

• feature: Place helm chart in an OCI registry

  enhancement
  DefectDojo/django-DefectDojo#16019 · Filter by author xrow opened on Sep 21, 2026

• Govulncheck Scanner parser returns HTTP 500 (KeyError: 'aliases') on OSV entries without aliases

  DefectDojo/django-DefectDojo#16009 · Filter by author extim-su opened on Sep 19, 2026
  1

• OpenVAS XML parser loses scanner-reported IP address when hostname is present

  bug
  DefectDojo/django-DefectDojo#16002 · Filter by author Whitehorse2 opened on Sep 18, 2026
  6