Skip to content

devops/v0.1.9

Choose a tag to compare

View all tags
@JonXSnow JonXSnow released this 21 Apr 06:53
· 100 commits to main since this release
devops/v0.1.9
643016d
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

What's Changed

  • feat(devops)!: add WithDevServerIP and change default listen to 127.0.0.1 by @JonXSnow in #789

    BREAKING CHANGE: the default listen address changed from
    0.0.0.0:52538 to 127.0.0.1:52538.

    The previous default (0.0.0.0) binds to all network interfaces,
    which means any device on the same network can access the devops
    debug API. For example, an attacker on the same LAN could send
    crafted requests to /eino/devops/debug/v1/graphs/{id}/threads to
    trigger arbitrary Graph debug execution and inspect internal state.
    Changing the default to 127.0.0.1 restricts access to localhost only

Full Changelog: components/model/openai/v0.1.13...devops/v0.1.9

Contributors

JonXSnow
Assets 2
Loading