From d3c5957a06bdda8f4fa65d16deb52f3e59868b37 Mon Sep 17 00:00:00 2001
From: "promptless[bot]" <promptless[bot]@users.noreply.github.com>
Date: Tue, 28 Jul 2026 08:29:16 +0000
Subject: [PATCH] docs(release-notes): add Serverless SDK SSRF download
 hardening (1.11.1)

---
 release-notes.mdx | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/release-notes.mdx b/release-notes.mdx
index c1213e65b..2bf135629 100644
--- a/release-notes.mdx
+++ b/release-notes.mdx
@@ -13,6 +13,10 @@ rss: true
 
   <Accordion title="July 2026" defaultOpen>
 
+**July 28, 2026**
+
+  <h4><Badge color="red">Security</Badge> Serverless Python SDK blocks SSRF in file downloads</h4> The Serverless Python SDK now refuses job-input download URLs that resolve to non-public addresses, including the cloud instance-metadata endpoint (169.254.169.254), loopback, and private RFC 1918 ranges. It allows only `http` and `https` URLs, re-validates every redirect, and caps download size. This ships in the `runpod` Python SDK 1.11.1. Set `RUNPOD_ALLOW_PRIVATE_DOWNLOAD_URLS` (opt-in, default off) to re-allow downloads from private or same-VPC addresses when you need them. Use `RUNPOD_MAX_DOWNLOAD_BYTES` to change the per-download cap (default 5 GiB).
+
 **July 23, 2026**
 
   <h4><Badge color="green">New Release</Badge> [Runpod API v2 (BETA)](/api-reference-v2/overview) </h4> A new REST API is available in public beta. See the [API v2 reference](/api-reference-v2/overview) to get started. The [GraphQL API](/api-reference/overview) and REST API v1 continue to work for now, but will be deprecated in a future release, so new integrations should build on API v2.