Search results

structuredClone(Object.prototype) throws a DataCloneError instead of returning an empty object

bugSomething isn't workingSomething isn't working

web-apiSomething that relates to a standard Web APISomething that relates to a standard Web API

Status: Open.

#32981 In oven-sh/bun;

· robobun opened on Jun 28, 2026

node:fs: fs.promises.realpath uses the non-native realpath variant instead of realpath.native

Status: Open.

#32963 In oven-sh/bun;

· robobun opened on Jun 28, 2026

transpiler: expose reactFastRefresh on new Bun.Transpiler() (parser support exists, needs ~3 lines of threading)

Status: Open.

#32919 In oven-sh/bun;

· alexkahndev opened on Jun 27, 2026

node:crypto: generateKeyPair("rsa-pss") silently accepts conflicting deprecated hash / hashAlgorithm aliases

bugSomething isn't workingSomething isn't working

node:crypto

Status: Open.

#32835 In oven-sh/bun;

· robobun opened on Jun 27, 2026

FileHandle.createWriteStream({ flush: true }) + handle.close() leaks the handle on Windows → EPERM on subsequent rename()

bugSomething isn't workingSomething isn't working

needs triage

Status: Open.

#32829 In oven-sh/bun;

· Luligu opened on Jun 27, 2026

Worker does not exit after parentPort.close() — 'exit' is never emitted

bugSomething isn't workingSomething isn't working

needs triage

Status: Open.

#32828 In oven-sh/bun;

· Luligu opened on Jun 27, 2026

bun update <package> ignores catalog and creates a spurious root dependency at latest

Status: Open.

#32808 In oven-sh/bun;

· maharshi365 opened on Jun 27, 2026

Bug: Bun server loses File MIME type when reading request body as Blob

bugSomething isn't workingSomething isn't working

needs triage

Status: Open.

#32801 In oven-sh/bun;

· dinwwwh opened on Jun 27, 2026

Bun 1.4 regression: a leaked setSystemTime() non-deterministically breaks Date.now()-based code in other test files (default runner; --isolate fixes it)

Status: Open.

#32793 In oven-sh/bun;

· RodriguesCosta opened on Jun 26, 2026

bun install/add of a tarball URL fails with DependencyLoop when updating an already-installed package to a different URL

Status: Open.

#32757 In oven-sh/bun;

· TorstenDittmann opened on Jun 26, 2026

Security: Fixed-seed non-cryptographic hashes (Wyhash11 / std.hash.Wyhash) are algebraically collidable, enabling trustedDependencies RCE, scoped-registry token leak, and cache poisoning

bugSomething isn't workingSomething isn't working

needs triage

Status: Open.

#32741 In oven-sh/bun;

· kexinoh opened on Jun 26, 2026

Bun 1.4 regression: bidirectional WebSocket proxy scope hangs after successful messages

Status: Open.

#32734 In oven-sh/bun;

· Hona opened on Jun 26, 2026