Repository navigation

fix(security): cherry-pick 3 SSRF guards (loopback via proxy, DNS rebinding, Kiro region) - #4972

Closed

KooshaPari wants to merge 4 commits into

cheaper-inference:mainfrom

KooshaPari:upstream-pr/security-sweep-2026-06-24

Closed

fix(security): cherry-pick 3 SSRF guards (loopback via proxy, DNS rebinding, Kiro region)#4972
KooshaPari wants to merge 4 commits into
cheaper-inference:mainfrom
KooshaPari:upstream-pr/security-sweep-2026-06-24

Commits on Jun 25, 2026
- fix(security): pin image fetch DNS resolution to prevent SSRF rebinding (GHSA-cmhj-wh2f-9cgx) (#4634)
  
  diegosouzapw
  authored and
  KooshaPari
  committed
  1569cc4
- fix(security): don't trust loopback socket as local when behind reverse proxy (#4632)
  
  diegosouzapw
  authored and
  KooshaPari
  committed
  679c124
- fix(security): validate kiro region to prevent SSRF (GHSA-6mwv-4mrm-5p3m) (#4629)
  
  diegosouzapw
  authored and
  KooshaPari
  committed
  1fdb299
- fix(security): upstream Codex imageHelper SSRF guard 971a0467c is no-op for KP fork
  KooshaPari
  committed
  df8e654