Xiangzhe b42e57f97d fix(security): SSRF guard on the executor dispatch path (provider baseUrl) ...

A persisted, caller-supplied providerSpecificData.baseUrl reached fetch() on the
runtime dispatch path with no SSRF guard, so a manage-scope actor (or an
anonymous one on a keyless install) could point a provider at loopback /
internal / cloud-metadata hosts and reach the instance metadata service.
BaseExecutor now mirrors the provider validation guard before every upstream
fetch (fetchWithStartTimeout covers retries/fallback URLs; countTokens too), with
the same call added to the glm and nlpcloud executors' own fetch paths. Local /
self-hosted providers stay exempt; default block-metadata mode stops the
cloud-metadata IMDS pivot, public-only mode also blocks private targets.

Reported by @rafaelfiguereod-stack via GHSA-4f49-hj64-448x.

2026-08-21 14:01:27 -03:00

..

config

feat(providers): Cursor PKCE login with Bearer quota, auto router, and empty-turn errors (#9909)

2026-08-21 10:28:01 -03:00

executors

fix(security): SSRF guard on the executor dispatch path (provider baseUrl)

2026-08-21 14:01:27 -03:00

handlers

fix(models): enforce a synced model's real context window and default effort immediately (#10957)

2026-08-21 08:25:14 -03:00

lib

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

mcp-server

fix(security): bind MCP memory tools to the authenticated caller (IDOR)

2026-08-21 13:49:45 -03:00

services

feat(providers): Cursor PKCE login with Bearer quota, auto router, and empty-turn errors (#9909)

2026-08-21 10:28:01 -03:00

shared

Release v3.8.46

2026-07-07 13:14:06 -03:00

transformer

fix(sse): strip corrupted request_id from upstream SSE responses (#10223) (#10666)

2026-08-20 13:21:03 -03:00

translator

fix(sse): re-run strict system hoist after format translation (#10803)

2026-08-20 23:46:03 -03:00

utils

feat(providers): Cursor PKCE login with Bearer quota, auto router, and empty-turn errors (#9909)

2026-08-21 10:28:01 -03:00

vendor/codex-chatgpt-web

fix(quality): green release/v3.8.50 base-reds round 2 (#9985) (#10131)

2026-08-12 16:09:34 -03:00

index.ts

[Part 1/3]refactor(qwen): replace legacy Qwen Code and remove OAuth provider (#7866)

2026-07-20 17:53:04 -03:00

package.json

fix(build): remove misleading open-sse/package.json facade and add workspace typecheck gate (#8781)

2026-08-07 18:07:50 -03:00

tsconfig.json

chore(sse): drop deprecated baseUrl from open-sse tsconfig for TS 7.0 (#8473)

2026-07-25 02:53:01 -03:00

types.d.ts

feat(api): add per-key prompt compression bypass (#10001)

2026-08-11 09:20:41 -03:00