Skip to content

v0.0.73

Choose a tag to compare

@mbakgun mbakgun released this 19 Jul 17:07
· 129 commits to main since this release
87c216f

What's Changed

Security

  • Fixed an SSRF in the HTTP node (blocks internal/metadata targets, pins IPs against DNS-rebinding/redirect/proxy bypasses; opt out with HEYM_HTTP_ALLOW_PRIVATE_URLS). Thanks @0neOfU4 (GHSA-8wj7-v2w6-wfcx)
  • Removed the setup command field from the Codex and OpenCode Go nodes to close a backend shell-exec surface; existing values are ignored. Thanks @0neOfU4.

Full Changelog: v0.0.72...0.0.73