Issues

• [plugin-multi-tenant] Infinite redirect loop with custom tenantFieldName and isGlobal collections

  Bugplugin: multi-tenantstatus: needs-triagev3
  payloadcms/payload#18690 · Filter by author GSFranzoni opened on Oct 13, 2026

• db-mongodb: concurrent commands at the start of a transaction fail with NoSuchTransaction (251)

  Bugcreated-by: Contributordb: mongodbv3
  payloadcms/payload#18679 · Filter by author andershermansen opened on Oct 13, 2026
  1

  

• bug: v4 single-locale publish pairs block/array rows by index, not id

  area: coreBugcreated-by: Contributor
  payloadcms/payload#18678 · Filter by author jhb-dev opened on Oct 13, 2026

• bug: single-locale publish pairs block/array rows by index, not id

  area: coreBugcreated-by: Contributor
  payloadcms/payload#18677 · Filter by author jhb-dev opened on Oct 13, 2026

• Global update drops overrideAccess, so Local API updateGlobal fails filterOptions validation (3.90 regression)

  area: coreBug
  payloadcms/payload#18674 · Filter by author FilipMessa opened on Oct 13, 2026
  1

• "Revert to published" publishes draft values for fields absent from the published document

  area: corearea: uiBugcreated-by: Contributordb: mongodb
  payloadcms/payload#18671 · Filter by author damnsamn opened on Oct 13, 2026
  1

• db-postgres: connect() rejects its initializing promise with no argument, producing an unhandledRejection with reason undefined

  area: db-postgresBug
  payloadcms/payload#18656 · Filter by author iofreddy85 opened on Oct 10, 2026
  1

• db-postgres / drizzle: commitTransaction resolves when the COMMIT fails, so a lost transaction looks like a success

  Bugdb: postgres
  payloadcms/payload#18653 · Filter by author yousefamar opened on Oct 10, 2026

• Bulk upload from a hasMany upload field: closing the drawer once without uploading silently drops the next upload (docs created, field unchanged)

  Bug
  payloadcms/payload#18652 · Filter by author alaintammermann-dot opened on Oct 10, 2026
  1

• [richtext-lexical] Strikethrough/inline format carries into a manually-typed checklist ([x]) on the next line

  Bugplugin: richtext-lexicalstatus: needs-triagev3
  payloadcms/payload#18639 · Filter by author riancintiyo opened on Oct 9, 2026
  1

• Blocks field: block added while form state is still syncing renders empty (header only, no fields)

  Bug
  payloadcms/payload#18638 · Filter by author graiparrot opened on Oct 9, 2026
  1

• Accessibility: low contrast for descriptions and table headers, sort buttons below 24px

  Bug
  payloadcms/payload#18637 · Filter by author graiparrot opened on Oct 9, 2026
  1

  

• Accessibility: field errors and descriptions are not programmatically associated with the input

  Bug
  payloadcms/payload#18636 · Filter by author graiparrot opened on Oct 9, 2026
  1

  

• Accessibility: dnd-kit drag instructions and announcements are English-only and expose internal IDs

  Bug
  payloadcms/payload#18635 · Filter by author graiparrot opened on Oct 9, 2026
  1

  

• Accessibility: several admin controls have no accessible name (blocks/array rows, select fields, document menu, upload, logo link)

  Bug
  payloadcms/payload#18633 · Filter by author graiparrot opened on Oct 9, 2026
  1

  

• bug(uploads): raw uploaded images bypass transformer pipeline preserving sensitive EXIF GPS location metadata (CWE-200)

  - `area: core` - `area: uploads` ---Bug
  payloadcms/payload#18629 · Filter by author halilyilmz opened on Oct 8, 2026

• plugin-cloud-storage: unused find-node-modules dependency pulls in braces (GHSA-vfj7-8cjw-p6xm, no patched version)

  Bugplugin: cloud-storageplugin: storage-*status: needs-triagev3
  payloadcms/payload#18623 · Filter by author kumardeepakcom opened on Oct 8, 2026

• v4: file-type 22 loads strtok3 via import(variable) → strtok3/lib/index.js missing from Next standalone output, fileTypeFromFile throws ERR_MODULE_NOT_FOUND

  area: corearea: uploadsBugplugin: next (`withPayload`)
  payloadcms/payload#18588 · Filter by author CommerceMax opened on Oct 7, 2026

• Collection and global slugs are not validated for uniqueness

  area: coreBugcreated-by: Contributordb: mongodbdb: sqlitestatus: needs-triagev3
  payloadcms/payload#18584 · Filter by author VeiaG opened on Oct 7, 2026

• Jobs (3.x): two runs claim and run the same due jobs; the slower one fails with "Cannot read properties of null (reading 'log')" — please backport #17441

  area: coreBugdb: postgres
  payloadcms/payload#18565 · Filter by author stratlabsin-byte opened on Oct 6, 2026
  1

  

• createImageSizes decodes the source once per image size, all at once, so one upload can take hundreds of MB

  area: coreBugUploads
  payloadcms/payload#18531 · Filter by author saadshahd opened on Oct 6, 2026

• [plugin-ecommerce] Variant options selector and duplicate-variant validation silently stop at the first 10 join results

  Bug
  payloadcms/payload#18498 · Filter by author klaatu-code opened on Oct 5, 2026

• payload build requires runtime secrets because it loads the full config (Payload 3 & 4)

  area: coreBugstatus: needs-triagev3
  payloadcms/payload#18497 · Filter by author Llois41 opened on Oct 5, 2026
  1

• bulkOperationsSingleTransaction: bulk update and delete return documents that were rolled back

  area: coreBugcreated-by: Contributordb: mongodb
  payloadcms/payload#18494 · Filter by author Livog opened on Oct 5, 2026

• plugin-mcp: revalidatePath/revalidateTag called in hooks during MCP tool calls are silently dropped

  Bugplugin: mcp
  payloadcms/payload#18490 · Filter by author LukasHechenberger opened on Oct 5, 2026
  1