Issues

• EC streamed GET forwards the remote part-0 parent header without checking it against the requested ID

  bugneofs-storage
  nspcc-dev/neofs-node#4333 · Filter by author hal0x9000 opened on Nov 15, 2026

• PUT stores parts of a duplicate EC rule on the nodes of the first identical rule

  bugneofs-storage
  nspcc-dev/neofs-node#4332 · Filter by author hal0x9000 opened on Nov 15, 2026

• EC Audit: H6: partly stored EC PUT is answered with "internal server error" and no object ID

  bughal:proposedneofs-storage
  nspcc-dev/neofs-node#4331 · Filter by author fabwa opened on Nov 15, 2026
  2

• EC Audit: H1: ranged GET of an EC object fails with "object not found" when data part 0 is unavailable

  bughal:proposedneofs-storage
  nspcc-dev/neofs-node#4330 · Filter by author fabwa opened on Nov 15, 2026
  2

• EC Audit: N2: storage node panics when another node answers an EC part request with a linker header of huge payload length

  bughal:proposedneofs-storage
  nspcc-dev/neofs-node#4329 · Filter by author fabwa opened on Nov 15, 2026
  2

• EC Audit: H4: policer rebuilds wrong EC parts when it restores a rule from another rule

  bughal:proposedneofs-storage
  nspcc-dev/neofs-node#4328 · Filter by author fabwa opened on Nov 15, 2026
  2

• EC Audit: H2: EC part length check overflows, an empty part is accepted for a parent of 2^64-1 bytes

  bughal:proposedneofs-storage
  nspcc-dev/neofs-node#4327 · Filter by author fabwa opened on Nov 15, 2026
  2

• EC Audit: C2: EC GET verifies neither the parts it reads nor the payload it assembles

  bughal:proposedneofs-storage
  nspcc-dev/neofs-node#4326 · Filter by author fabwa opened on Nov 15, 2026
  2

• EC Audit: C1: metabase finds an EC part by index prefix, so part 1 also matches parts 10–19

  bughal:proposedneofs-storage
  nspcc-dev/neofs-node#4325 · Filter by author fabwa opened on Nov 15, 2026
  3

• Object requests are answered 1028 bad request when the container cannot be read from the chain

  bughal:proposedneofs-storage
  nspcc-dev/neofs-node#4321 · Filter by author hal0x9000 opened on Nov 14, 2026
  2

• A shard whose drive is full cannot free space

  bughal:proposedneofs-storage
  nspcc-dev/neofs-node#4319 · Filter by author fabwa opened on Nov 14, 2026
  2

  

• Object requests are answered "access denied" when the eACL cannot be read

  bughal:proposedneofs-storage
  nspcc-dev/neofs-node#4318 · Filter by author fabwa opened on Nov 14, 2026
  3

  

• Storage node answers object requests after its engine is closed on shutdown

  bughal:proposedneofs-storage
  nspcc-dev/neofs-node#4317 · Filter by author fabwa opened on Nov 14, 2026
  2

  

• GET and HEAD answer "object not found" when the nodes holding the object cannot be reached

  bughal:proposedneofs-storage
  nspcc-dev/neofs-node#4316 · Filter by author fabwa opened on Nov 14, 2026
  3

  

• Deleted object returns for good when one shard fails to store the tombstone

  bughal:proposedneofs-storage
  nspcc-dev/neofs-node#4315 · Filter by author fabwa opened on Nov 13, 2026
  3

  

• engine: TestBlobstorFailback leaks its second engine, flaky 'Log in goroutine after test has completed' panic

  nspcc-dev/neofs-node#4311 · Filter by author hal0x9000 opened on Nov 13, 2026

• metabase: InhumeContainer resets counters that Delete decrements again

  nspcc-dev/neofs-node#4310 · Filter by author hal0x9000 opened on Nov 13, 2026

• shard: ReviveObject does not update shard metrics

  nspcc-dev/neofs-node#4309 · Filter by author hal0x9000 opened on Nov 13, 2026

• Storage node metrics neofs_node_engine_payload_size and neofs_node_object_counter{type="gc"} go negative after object and container deletes (0.58.1)

  hal:pr-open
  nspcc-dev/neofs-node#4308 · Filter by author fabwa opened on Nov 13, 2026
  4

• v2 session signature does not cover origin, so a stranger can retarget the delegation chain

  I4neofs-irneofs-storageS4securityU1
  nspcc-dev/neofs-node#4307 · Filter by author evgeniiz321 opened on Nov 13, 2026 · v0.59.0
  1

• A delete session for one object reveals the rest of a private container

  bughal:proposedI4neofs-storageS4securityU1
  nspcc-dev/neofs-node#4301 · Filter by author evgeniiz321 opened on Nov 10, 2026 · v0.59.0
  5

• A user attribute can impersonate an $Object system header

  bughal:proposedI4neofs-storageS4U2
  nspcc-dev/neofs-node#4300 · Filter by author evgeniiz321 opened on Nov 10, 2026 · v0.59.0
  3

• An eACL submitted together with container creation is stored even when the container owner did not sign it.

  bughal:pr-openI4neofs-irS4securityU2
  nspcc-dev/neofs-node#4298 · Filter by author evgeniiz321 opened on Nov 10, 2026 · v0.59.0
  6

• A request-header DENY is skipped when an earlier object filter cannot be evaluated

  blockedbugI4neofs-storageS4securityU1
  nspcc-dev/neofs-node#4297 · Filter by author evgeniiz321 opened on Nov 10, 2026
  1

  

• NOT_PRESENT on an object attribute denies every SEARCH and DELETE

  bugI4neofs-storageS4U3
  nspcc-dev/neofs-node#4296 · Filter by author evgeniiz321 opened on Nov 10, 2026 · v0.59.0