Diego Rodrigues de Sa e Souza c98045652d fix(security): block SSRF via /v1/search Firecrawl provider_options.baseUrl (#10738) ...

The client-controlled provider_options.baseUrl (and legacy top-level
baseUrl) override was used verbatim to build the server-side fetch
target in buildFirecrawlSearchRequest(), with no SSRF validation. A
caller with a valid API key could redirect the search request at an
internal host (loopback, RFC1918, or a cloud-metadata endpoint) and
read the response back through the normal search result shape.

Validate the override with the existing outboundUrlGuard
(parseAndValidatePublicUrl) before it is used to build the fetch URL.
jinaSearch and perplexitySearch were checked and do not accept a
client-controlled baseUrl, so only firecrawlSearch needed the guard.

Reported-by: zmf963

Co-authored-by: Markus Hartung <mail@hartmark.se>

2026-08-19 12:10:22 -03:00

..

config

fix(ci): clear remaining base-reds on release/v3.8.50 (refs #9985) (#10749)

2026-08-19 12:09:43 -03:00

executors

fix(security): zero out open CodeQL code-scanning alerts (#10739)

2026-08-19 12:10:15 -03:00

handlers

fix(security): block SSRF via /v1/search Firecrawl provider_options.baseUrl (#10738)

2026-08-19 12:10:22 -03:00

lib

Release v3.8.4 (#2678)

2026-05-26 23:51:47 -03:00

mcp-server

feat: combo-lane awareness + activation UX + MCP visibility (Wave 2 of #9654) (#10039)

2026-08-18 11:31:46 -03:00

services

fix(security): zero out open CodeQL code-scanning alerts (#10739)

2026-08-19 12:10:15 -03:00

shared

Release v3.8.46

2026-07-07 13:14:06 -03:00

transformer

fix(responses): keep stream-aware TextDecoder across SSE transform chunks (#10223) (#10495)

2026-08-17 07:05:23 -03:00

translator

fix(gemini): inject missing items schema for array typed mcp tools (#10578) (#10605)

2026-08-18 10:52:56 -03:00

utils

fix(usage): repair zero-reported input_tokens on non-trivial requests (#10705) (#10757)

2026-08-19 12:02:48 -03:00

vendor/codex-chatgpt-web

fix(quality): green release/v3.8.50 base-reds round 2 (#9985) (#10131)

2026-08-12 16:09:34 -03:00

index.ts

[Part 1/3]refactor(qwen): replace legacy Qwen Code and remove OAuth provider (#7866)

2026-07-20 17:53:04 -03:00

package.json

fix(build): remove misleading open-sse/package.json facade and add workspace typecheck gate (#8781)

2026-08-07 18:07:50 -03:00

tsconfig.json

chore(sse): drop deprecated baseUrl from open-sse tsconfig for TS 7.0 (#8473)

2026-07-25 02:53:01 -03:00

types.d.ts

feat(api): add per-key prompt compression bypass (#10001)

2026-08-11 09:20:41 -03:00