v1.107.2 (2026-08-07)

🛡️ Security

Fixes an availability vulnerability: unbounded memory use when downloading remote content via the local web_fetch tool or FileUrl media downloads, which could exhaust process memory and crash the worker. Patched versions enforce a default 50 MiB download cap. See GHSA-v2xh-2vp8-57h8. Patched in 1.107.2 (v1) and 2.24.0 (v2).

What's Changed

🐛 Bug Fixes

• Bound HTTP response body sizes for web_fetch and media URL downloads by @dsfaccini in #7308

Full Changelog: v1.107.1...v1.107.2