Issues

• booth:set-broadcast-unlocked treats "false" as Go Live and a missing value as Stop

  bug
  fossasia/voxbento#819 · Filter by author ManojLamani opened on Oct 16, 2026

• [SECURITY] Unauthorized WebSocket clients can receive private booth broadcasts

  fossasia/voxbento#809 · Filter by author Mars-60 opened on Oct 15, 2026

• [SECURITY] validate_production_secrets() does not guard against weak SECRET_KEY values beyond a fixed denylist

  fossasia/voxbento#800 · Filter by author VineetRamshetty opened on Oct 14, 2026

• [Feature Request]: Add Light/Dark Theme Toggle

  enhancement
  fossasia/voxbento#790 · Filter by author DarshanKudrigi opened on Oct 13, 2026
  3

• [SECURITY] Set secure=True on authentication cookies and configure global HTTP security headers

  authbackendenhancementhelp wanted
  fossasia/voxbento#789 · Filter by author ArnavBallinCode opened on Oct 13, 2026
  1

• [SECURITY] Webhook dispatch vulnerable to SSRF via DNS rebinding (TOCTOU) and IPv6 addresses

  backendbughelp wanted
  fossasia/voxbento#788 · Filter by author ArnavBallinCode opened on Oct 13, 2026
  1

• Refactor: Collapse dual email modules into a unified Notification Dispatch module

  backendhelp wanted
  fossasia/voxbento#787 · Filter by author ArnavBallinCode opened on Oct 13, 2026
  5

• [SECURITY] Unauthenticated REST API access when BOOTH_ACCESS_TOKEN is unset and signature bug in delete_event_booth

  authbackendbughelp wanted
  fossasia/voxbento#786 · Filter by author ArnavBallinCode opened on Oct 13, 2026

• Refactor: Deepen Booth Session coordination and eliminate shallow handlers wrapper

  backendhelp wanted
  fossasia/voxbento#785 · Filter by author ArnavBallinCode opened on Oct 13, 2026
  2

• Refactor: Consolidate access evaluation into a unified AccessPolicy and Principal interface

  backendhelp wanted
  fossasia/voxbento#784 · Filter by author ArnavBallinCode opened on Oct 13, 2026
  1

• [SECURITY] Unauthenticated MediaMTX interpreter WHIP ingest permits audio channel hijacking

  backendbughelp wantedstreaming
  fossasia/voxbento#783 · Filter by author ArnavBallinCode opened on Oct 13, 2026
  1

• feat(floor-bot): auto-leave meeting when no participants are present

  enhancementhelp wanted
  fossasia/voxbento#781 · Filter by author ArnavBallinCode opened on Oct 13, 2026
  2

• Signed-in users can request hosting access, and Admins grant or decline it

  fossasia/voxbento#768 · Filter by author hpdang opened on Oct 12, 2026
  

• Redesign the Account page around the person's profile, access and sign-in

  fossasia/voxbento#767 · Filter by author hpdang opened on Oct 12, 2026
  

• One user menu on every signed-in page, matching Eventyay

  fossasia/voxbento#766 · Filter by author hpdang opened on Oct 12, 2026
  

• Admin panel: redesign the user page

  fossasia/voxbento#765 · Filter by author hpdang opened on Oct 12, 2026
  

• Simplify the Admin panel to five pages focused on running the platform

  P2
  fossasia/voxbento#764 · Filter by author hpdang opened on Oct 12, 2026
  

• Admins grant hosting access; people with hosting access create and run their own events

  P1
  fossasia/voxbento#761 · Filter by author hpdang opened on Oct 12, 2026
  

• Define user roles and their permissions in one place, use "admin" only for the Admin role, and remove the unused Support role

  P1
  fossasia/voxbento#757 · Filter by author hpdang opened on Oct 12, 2026
  1

  

• Add a unified guided floor-source setup for meetings, venues and broadcasts

  backendenhancementfrontendP2streamingui
  fossasia/voxbento#751 · Filter by author ArnavBallinCode opened on Oct 12, 2026
  1

• Harden the broadcast gateway and add SRT contribution ingest

  authbackendenhancementinfraP2performancestreaming
  fossasia/voxbento#750 · Filter by author ArnavBallinCode opened on Oct 12, 2026
  1

• Add room-scoped RTMPS ingest with an optional YouTube relay

  authbackendenhancementfrontendinfraP1streaming
  fossasia/voxbento#749 · Filter by author ArnavBallinCode opened on Oct 12, 2026
  5

• Epic: Make professional program-audio connection first-party and organiser-friendly

  enhancementP1streaming
  fossasia/voxbento#746 · Filter by author ArnavBallinCode opened on Oct 12, 2026
  3

  

• [RELIABLITY] InMemoryRateLimiter.cleanup() never called → unbounded memory growth in _store

  fossasia/voxbento#741 · Filter by author VineetRamshetty opened on Oct 12, 2026

• feat(eventyay-interpretation) : Required Changes in VoxBento for Eventyay Interpretation Overhaul

  authbackendenhancementeventyay
  Feature

  fossasia/voxbento#739 · Filter by author Nirupon123 opened on Oct 12, 2026
  1