bugsink 2.2.1__tar.gz → 2.2.2__tar.gz

{bugsink-2.2.1 → bugsink-2.2.2}/CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changes
 
+## 2.2.2 (4 June 2026)
+
+### Security
+
+Fix: cap the number of tags stored per event.
+
+Events with very many tags could keep the single write transaction busy for longer than intended during digestion.
+Bugsink now stores at most `MAX_EVENT_TAGS` tags per event, defaulting to 100.
+
+https://github.com/bugsink/bugsink/security/advisories/GHSA-5x67-j5xg-c5gj
+
+### Smaller fixes
+
+* Show project slugs as read-only on project settings pages, see #402.
+
 ## 2.2.1 (22 May 2026)
 
 ### API

{bugsink-2.2.1 → bugsink-2.2.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: bugsink
-Version: 2.2.1
+Version: 2.2.2
 Summary: Self-hosted Error Tracking
 Author-email: "Bugsink B.V." <info@bugsink.com>
 Project-URL: homepage, https://www.bugsink.com/

{bugsink-2.2.1 → bugsink-2.2.2}/bsmain/management/commands/send_json.py

@@ -12,6 +12,7 @@ from django.core.management.base import BaseCommand, CommandError
 from django.conf import settings
 
 from compat.dsn import get_store_url, get_envelope_url, get_header_value
+from bugsink.app_settings import get_settings
 from bugsink.streams import compress_with_zlib, WBITS_PARAM_FOR_GZIP, WBITS_PARAM_FOR_DEFLATE
 from bugsink.utils import nc_rnd
 
@@ -31,6 +32,7 @@ class Command(BaseCommand):
         parser.add_argument("--compress", action="store", choices=["gzip", "deflate", "br"], default=None)
         parser.add_argument("--use-store-api", action="store_true", help="Use (deprecated) /api/<id>/store/")
         parser.add_argument("--chunked-encoding", action="store_true")
+        parser.add_argument("--respect-limits", action="store_true", help="Use client-side size-limit checks")
         parser.add_argument(
             "--x-forwarded-for", action="store",
             help="Set the X-Forwarded-For header to test whether your setup is properly ignoring it")
@@ -132,6 +134,14 @@ class Command(BaseCommand):
         if options["valid_only"] and not self.is_valid(data, identifier):
             return False
 
+        data_bytes = json.dumps(data, separators=(",", ":")).encode("utf-8")
+
+        # For now this only checks the event item size; we'll add other limit checks as needed.
+        if options["respect_limits"] and len(data_bytes) >= get_settings().MAX_EVENT_SIZE:
+            raise CommandError(
+                "Event JSON is %d bytes, which would hit the %d byte event-size limit" % (
+                    len(data_bytes), get_settings().MAX_EVENT_SIZE))
+
         try:
             headers = {
                 "Content-Type": "application/json",
@@ -141,7 +151,6 @@ class Command(BaseCommand):
             if options["x_forwarded_for"]:
                 headers["X-Forwarded-For"] = options["x_forwarded_for"]
 
-            data_bytes = json.dumps(data).encode("utf-8")
             if use_envelope:
                 event_id = data.get("event_id", uuid.uuid4().hex)
 

{bugsink-2.2.1 → bugsink-2.2.2}/bugsink/_version.py

@@ -18,7 +18,7 @@ version_tuple: tuple[int | str, ...]
 commit_id: str | None
 __commit_id__: str | None
 
-__version__ = version = '2.2.1'
-__version_tuple__ = version_tuple = (2, 2, 1)
+__version__ = version = '2.2.2'
+__version_tuple__ = version_tuple = (2, 2, 2)
 
-__commit_id__ = commit_id = 'gea814dc8e'
+__commit_id__ = commit_id = 'gdd17221c0'

{bugsink-2.2.1 → bugsink-2.2.2}/bugsink/app_settings.py

@@ -78,6 +78,10 @@ DEFAULTS = {
     # I don't think Sentry specifies this one, but we do: given the spec 8KiB should be enough by an order of magnitude.
     "MAX_HEADER_SIZE": 8 * _KIBIBYTE,
 
+    # Cap on the number of tags stored per event. Without it, a single event with very many tags becomes ~4x that
+    # many row-writes inside the (single-writer) digest transaction. 100 is well above any realistic event.
+    "MAX_EVENT_TAGS": 100,
+
     # Locations of files & directories:
     # no_bandit_expl: the usage of this path (via get_filename_for_event_id) is protected with `b108_makedirs`
     "INGEST_STORE_BASE_DIR": "/tmp/bugsink/ingestion",  # nosec

{bugsink-2.2.1 → bugsink-2.2.2}/bugsink/conf_templates/docker.py.template

@@ -175,6 +175,7 @@ BUGSINK = {
     "MAX_EVENT_COMPRESSED_SIZE": int(os.getenv("MAX_EVENT_COMPRESSED_SIZE", 200 * _KIBIBYTE)),
     "MAX_ENVELOPE_SIZE": int(os.getenv("MAX_ENVELOPE_SIZE", 100 * _MEBIBYTE)),
     "MAX_ENVELOPE_COMPRESSED_SIZE": int(os.getenv("MAX_ENVELOPE_COMPRESSED_SIZE", 20 * _MEBIBYTE)),
+    "MAX_EVENT_TAGS": int(os.getenv("MAX_EVENT_TAGS", 100)),
     # For large MAX_FILE_SIZE values, you may want FILE_OBJECT_STORAGE_PATH configured too.
     "MAX_FILE_SIZE": int(os.getenv("MAX_FILE_SIZE", 2 * _GIBIBYTE)),
 

{bugsink-2.2.1 → bugsink-2.2.2}/bugsink/conf_templates/local.py.template

@@ -80,6 +80,7 @@ BUGSINK = {
 
     # For large MAX_FILE_SIZE values, you may want OBJECT_STORAGES["file"] configured too.
     # "MAX_FILE_SIZE": 2 * _GIBIBYTE,
+    # "MAX_EVENT_TAGS": 100,
 
     # Webhook outbound security:
     # "ALERTS_WEBHOOK_OUTBOUND_MODE": "open",  # or "allowlist_only"

{bugsink-2.2.1 → bugsink-2.2.2}/bugsink/conf_templates/singleserver.py.template

@@ -112,6 +112,7 @@ BUGSINK = {
     # "MAX_EVENT_COMPRESSED_SIZE": 200 * _KIBIBYTE,
     # "MAX_ENVELOPE_SIZE": 100 * _MEBIBYTE,
     # "MAX_ENVELOPE_COMPRESSED_SIZE": 20 * _MEBIBYTE,
+    # "MAX_EVENT_TAGS": 100,
     # For large MAX_FILE_SIZE values, you may want OBJECT_STORAGES["file"] configured too.
     # "MAX_FILE_SIZE": 2 * _GIBIBYTE,
 

{bugsink-2.2.1 → bugsink-2.2.2}/bugsink.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: bugsink
-Version: 2.2.1
+Version: 2.2.2
 Summary: Self-hosted Error Tracking
 Author-email: "Bugsink B.V." <info@bugsink.com>
 Project-URL: homepage, https://www.bugsink.com/

{bugsink-2.2.1 → bugsink-2.2.2}/projects/forms.py

@@ -79,6 +79,7 @@ class ProjectMembershipForm(forms.ModelForm):
 
 class ProjectForm(forms.ModelForm):
 
+    slug = forms.CharField(label="Slug", disabled=True)
     dsn = forms.CharField(label="DSN", disabled=True)
 
     def __init__(self, *args, **kwargs):
@@ -101,6 +102,10 @@ class ProjectForm(forms.ModelForm):
             # for authorization are (from the user's perspective).
             del self.fields["team"]
 
+            # for editing, the slug is available, but read-only (editing affects the issue's short identifier)
+            self.fields["slug"].initial = self.instance.slug
+            self.fields["slug"].label = _("Slug (read-only)")
+
             # for editing, the DSN is availabe, but read-only
             self.fields["dsn"].initial = self.instance.dsn
             self.fields["dsn"].label = _("DSN (read-only)")
@@ -110,10 +115,6 @@ class ProjectForm(forms.ModelForm):
                 _("Use the DSN to {link}."),
                 link=format_html('<a href="{}" class="text-cyan-800 font-bold">{}</a>', href, _("set up the SDK")),
             )
-
-            # if we ever push slug to the form, editing it should probably be disallowed as well (but mainly because it
-            # has consequences on the issue's short identifier)
-            # del self.fields["slug"]
         else:
             # for creation, we allow changing the team; (as an additional improvement we _could_ consider hiding this
             # field if there is only one team, and especially if SINGLE_TEAM is True, but being explicit is fine too as
@@ -128,16 +129,16 @@ class ProjectForm(forms.ModelForm):
             elif team_qs.count() == 1:
                 self.fields["team"].initial = team_qs.first()
 
-            # for creation, we don't show the DSN field
+            # for creation, we don't show the slug or DSN fields
+            del self.fields["slug"]
             del self.fields["dsn"]
 
     class Meta:
         model = Project
 
         fields = ["team", "name", "visibility", "retention_max_event_count"]
-        # "slug",  <= for now, we just do this in the model; if we want to do it in the form, I would want to have some
-        # JS in place like we have in the admin. django/contrib/admin/static/admin/js/prepopulate.js is an example of
-        # how Django does this (but it requires JQuery)
+        # slug is shown read-only via an explicit (declared) field for edit; creation auto-generates it on the model.
+        # If we ever make slug editable, we'd want JS like django/contrib/admin/static/admin/js/prepopulate.js.
 
         # "alert_on_new_issue", "alert_on_regression", "alert_on_unmute" later
 

{bugsink-2.2.1 → bugsink-2.2.2}/projects/templates/projects/project_edit.html

@@ -43,6 +43,7 @@
         </div>
 
         {% tailwind_formfield form.name %}
+        {% tailwind_formfield form.slug %}
         {% tailwind_formfield form.visibility %}
         {% tailwind_formfield form.retention_max_event_count %}
         {% tailwind_formfield form.dsn %}

{bugsink-2.2.1 → bugsink-2.2.2}/projects/tests.py

@@ -5,7 +5,8 @@ from unittest.mock import patch
 
 from bugsink.test_utils import TransactionTestCase25251 as TransactionTestCase
 from bugsink.utils import get_model_topography
-from projects.models import Project, ProjectMembership, ProjectRole
+from projects.forms import ProjectForm
+from projects.models import Project, ProjectMembership, ProjectRole, ProjectVisibility
 from events.factories import create_event
 from issues.factories import get_or_create_issue, denormalized_issue_fields
 from tags.models import store_tags
@@ -146,6 +147,29 @@ class ProjectDeletionTestCase(TransactionTestCase):
         ])
 
 
+class ProjectFormTestCase(TransactionTestCase):
+
+    def test_slug_is_read_only_on_edit(self):
+        # Slug is exposed on the edit form for visibility but must not be editable: it's part of the issue's short
+        # identifier, so changing it would break external references.
+        project = Project.objects.create(name="Original Name", slug="original-slug")
+
+        form = ProjectForm(
+            data={
+                "name": "Renamed",
+                "slug": "tampered-slug",
+                "visibility": ProjectVisibility.JOINABLE,
+                "retention_max_event_count": 10000,
+            },
+            instance=project,
+        )
+
+        self.assertTrue(form.is_valid(), form.errors)
+        saved = form.save()
+        self.assertEqual(saved.slug, "original-slug")
+        self.assertEqual(saved.name, "Renamed")
+
+
 class ProjectListOpenIssueCountTestCase(TransactionTestCase):
 
     def setUp(self):

{bugsink-2.2.1 → bugsink-2.2.2}/tags/models.py

@@ -18,6 +18,8 @@ https://docs.sentry.io/platforms/python/enriching-events/tags/
 """
 
 
+import logging
+
 from django.db import models
 from django.db.models import F, Q
 from django.db import connection
@@ -25,6 +27,9 @@ from django.db import connection
 from projects.models import Project
 from tags.utils import deduce_tags, is_mostly_unique
 from bugsink.moreiterutils import batched
+from bugsink.app_settings import get_settings
+
+logger = logging.getLogger("bugsink.ingest")
 
 # Notes on .project as it lives on TagValue, IssueTag and EventTag:
 # In all cases, project could be derived through other means: for TagValue it's implied by TagKey.project; for IssueTag
@@ -175,6 +180,14 @@ def digest_tags(event_data, event, issue):
             else:
                 tags[key] = event.remote_addr
 
+    # An event may carry an unbounded number of tags; without a cap a single event becomes ~4x that many row
+    # writes inside the (single-writer) digest transaction. Keep the first tags from deduce_tags(), which means
+    # user-provided tags are kept before later synthetic tags.
+    max_tags = get_settings().MAX_EVENT_TAGS
+    if len(tags) > max_tags:
+        logger.warning("event has %d tags; storing %d and dropping the rest", len(tags), max_tags)
+        tags = dict(list(tags.items())[:max_tags])
+
     store_tags(event, issue, tags)
 
 

{bugsink-2.2.1 → bugsink-2.2.2}/tags/tests.py

@@ -2,6 +2,7 @@ from unittest import TestCase as RegularTestCase
 from django.test import TestCase as DjangoTestCase
 from django.conf import settings
 
+from bugsink.app_settings import override_settings as override_bugsink_settings
 from bugsink.test_utils import TransactionTestCase25251 as TransactionTestCase
 from projects.models import Project
 from issues.factories import get_or_create_issue, denormalized_issue_fields
@@ -179,6 +180,30 @@ class DigestTagsTestCase(DjangoTestCase):
 
         self.assertEqual([], [e.value.value for e in event.get_tags])
 
+    def test_max_event_tags_keeps_first_user_tags(self):
+        project = Project.objects.create(name="Test Project")
+        issue, _ = get_or_create_issue(project)
+        event = create_event(project, issue=issue)
+
+        event_data = {
+            "tags": {
+                "user_tag_1": "one",
+                "user_tag_2": "two",
+                "user_tag_3": "three",
+            },
+            "server_name": "synthetic",
+        }
+
+        with override_bugsink_settings(MAX_EVENT_TAGS=2):
+            with self.assertLogs("bugsink.ingest", level="WARNING"):
+                digest_tags(event_data, event, issue)
+
+        self.assertEqual(["user_tag_1", "user_tag_2"], [
+            tag.value.key.key for tag in event.tags.order_by("value__key__key")
+        ])
+        self.assertFalse(event.tags.filter(value__key__key="user_tag_3").exists())
+        self.assertFalse(event.tags.filter(value__key__key="server_name").exists())
+
 
 class SearchParserTestCase(RegularTestCase):