Project

General

Profile

Actions

Defect #43547

closed

Redmine session cookie overflowed with size 4146 bytes

Added by Andrew Sevastyanov about 18 hours ago. Updated about 14 hours ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Category:
Accounts / authentication
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Resolution:
Invalid
Affected version:

Description

[2025-11-28T12:14:22.767484 #1] INFO -- : [5b03b4fe-1bdc-4b10-8cf0-36e686d12d58] Started GET "/kanban?updated_within=62&done_within=14&due_date=unspecified&tracker_id=unspecified&user_id=6&group_id=unspecified&project_all=0&version_id=unspecified&cbx=1&open_versions=1&wip_max=2&card_size=normal_estimated_hours&cb_ancestor=1&show_ancestors=1&status_fields%5B1%5D=0&status_fields%5B1%5D=1&status_fields%5B2%5D=0&status_fields%5B2%5D=1&status_fields%5B3%5D=0&status_fields%5B3%5D=1&status_fields%5B4%5D=0&status_fields%5B4%5D=1&status_fields%5B5%5D=0&status_fields%5B5%5D=1&status_fields%5B6%5D=0&status_fields%5B7%5D=0&project_id=wiwiwi&scroll_top=4" for lalala at 2025-11-28 12:14:22 +0000
I, [2025-11-28T12:14:22.771650 #1] INFO -- : [5b03b4fe-1bdc-4b10-8cf0-36e686d12d58] Processing by KanbanController#index as HTML
I, [2025-11-28T12:14:22.771847 #1] INFO -- : [5b03b4fe-1bdc-4b10-8cf0-36e686d12d58] Parameters: {"updated_within" => "62", "done_within" => "14", "due_date" => "unspecified", "tracker_id" => "unspecified", "user_id" => "6", "group_id" => "unspecified", "project_all" => "0", "version_id" => "unspecified", "cbx" => "1", "open_versions" => "1", "wip_max" => "2", "card_size" => "normal_estimated_hours", "cb_ancestor" => "1", "show_ancestors" => "1", "status_fields" => {"1" => "1", "2" => "1", "3" => "1", "4" => "1", "5" => "1", "6" => "0", "7" => "0"}, "project_id" => "winrace", "scroll_top" => "4"}
I, [2025-11-28T12:14:22.785329 #1] INFO -- : [5b03b4fe-1bdc-4b10-8cf0-36e686d12d58] Current user: skrk360 (id=6)
I, [2025-11-28T12:14:23.043152 #1] INFO -- : [5b03b4fe-1bdc-4b10-8cf0-36e686d12d58] Rendered layout layouts/base.html.erb (Duration: 216.6ms | GC: 0.0ms)
I, [2025-11-28T12:14:23.044168 #1] INFO -- : [5b03b4fe-1bdc-4b10-8cf0-36e686d12d58] Completed 200 OK in 272ms (Views: 179.7ms | ActiveRecord: 57.6ms (84 queries, 41 cached) | GC: 0.0ms)
F, [2025-11-28T12:14:23.052184 #1] FATAL -- : [5b03b4fe-1bdc-4b10-8cf0-36e686d12d58]
[5b03b4fe-1bdc-4b10-8cf0-36e686d12d58] ActionDispatch::Cookies::CookieOverflow (_redmine_session cookie overflowed with size 4146 bytes):

Environment:
Redmine version 6.1.0.stable
Ruby version 3.4.7-p58 (2025-10-08) [x86_64-linux]
Rails version 7.2.2.2
Environment production
Database adapter Mysql2
Mailer queue ActiveJob::QueueAdapters::AsyncAdapter
Mailer delivery smtp
Redmine settings:
Redmine theme Alternate
SCM:
Subversion 1.14.2
Mercurial 6.3.2
Bazaar 3.3.2
Git 2.39.5
Filesystem
Redmine plugins:
kanban 0.0.12
redmine_banner 0.3.4
redmine_checklists 3.1.27
redmine_oauth 3.0.6
redmine_telegram_notifications 0.1

The error occurs when working with tasks and kanban from the plugin. The problem appeared with the introduction of the plugin. No one has reported such issues in the plugin's git repository

Actions #1

Updated by Andrew Sevastyanov about 18 hours ago

Only redmine administrators are affected. Administrators have 3 projects with 2 roles per project

Actions #2

Updated by Holger Just about 14 hours ago

  • Status changed from New to Closed
  • Resolution set to Invalid

It seems you are using this plugin: https://github.com/happy-se-life/kanban

Quickly skimming over the code, it seems that store quite a lot of data in the session (which in turn gets stored in a signed cookie by default). Depending on the amount of data in your projects or other configurations, this can quickly overflow the amount of data which can be stored in the session cookie.

However, as this behavior seems to be caused entirely by the plugin, there is nothing we can do about this here. Please contact the authors of the plugin instead.

Actions

Also available in: Atom PDF