Diego Rodrigues de Sa e Souza 9244d930ea fix(security): pin image fetch DNS resolution to prevent SSRF rebinding (GHSA-cmhj-wh2f-9cgx) (#4634) ...

Integrated into release/v3.8.36 — pin DNS for image fetch SSRF rebinding guard (GHSA-cmhj-wh2f-9cgx, port c7d07448); caller DNS stubs + test-file baseline reconciled; release-green

2026-06-23 22:14:30 -03:00

..

outboundUrlGuard.ts

fix(api): harden private webhook opt-in against cloud-metadata SSRF (#3269) (#3281)

2026-06-06 03:08:16 -03:00

remoteImageFetch.ts

fix(security): pin image fetch DNS resolution to prevent SSRF rebinding (GHSA-cmhj-wh2f-9cgx) (#4634)

2026-06-23 22:14:30 -03:00

safeOutboundFetch.ts

fix: NVIDIA NIM API key validation timeout (bypass proxy fetch patch) (#3226)

2026-06-05 11:52:27 -03:00