Skip to content

OpenRing 0.1.5: no requests to cloud metadata, no leaked URLs, campaign fixes

Choose a tag to compare

View all tags
@elifalanrocha elifalanrocha released this 01 Nov 23:54
· 74 commits to main since this release
v0.1.5
d168442

A security and fixes release. Update if your server takes assistants, tools or imports from anyone else.

npx openring                                 # installs 0.1.5
pip install -U "openring[kokoro,whisper]"    # or with pip

Security

  • No requests to cloud metadata addresses. Tool servers, server.url, custom-llm base URLs and the import source come from assistants, numbers and API calls. On a cloud server, a URL such as http://169.254.169.254/ could have read the machine's cloud credentials through OpenRing. Link-local and cloud metadata addresses are now refused, on every request and redirect. Private networks stay allowed, so a tool server on your office network still works.
  • URLs no longer leak. When a tool failed, the error the model read, and could say to the caller, included the tool's full URL. Webhook URLs, which often carry a secret, are now logged as scheme and host only.
  • New guidance in the README and SECURITY.md: tools should treat the model's arguments as untrusted input (prompt injection).

Fixed

  • The owner can't lock themselves out anymore: wrong passwords typed on the server's own computer don't count toward the sign-in limit.
  • A campaign never calls the same person twice, even when a number is written two ways or appears in two lists. Customer numbers need 7 to 15 digits, with the country code.
  • npx openring right after a release no longer says the new version doesn't exist: it asks PyPI again, once.
  • With its output going to a pipe (Docker logs, systemd), openring printed nothing at startup; it does now, and says when an example API key was ignored and where the new one is.
  • Deleting a model route updates the assistants that used it. Measure speed reports a model that no longer resolves instead of failing.
  • A Genesys connection with a malformed signature time is refused cleanly.
  • Dashboard: dates in English, like the rest of the page; a call's cards in even rows; the overview's bars lined up.

Added

  • The new-campaign form warns when calls could reach people before 8 AM or after 9 PM their time.

Full list of changes: CHANGELOG.md

Assets 2
Loading