v0.45.1: SSRF DNS-rebind closure + HTTP transport/SSE audit fixes#173

Merged

vaaraio merged 10 commits into

mainfrom

fix/audit-findings-20260530

May 30, 2026

Commits on May 30, 2026

fix(cli): repair compliance dashboard DB-to-renderer wiring

vaaraio
and
claude
committed
chore: public-face tidy (README --upstream-url, pyproject subtitle, gitignore hardening)

vaaraio
and
claude
committed
fix(mcp-proxy): SSRF egress floor on the remote --upstream-url connector

vaaraio
and
claude
committed
fix(mcp-proxy): offload blocking _handle_request to a worker thread

vaaraio
and
claude
committed
fix(mcp-proxy): identity-checked SSE unregister survives reconnect race

vaaraio
and
claude
committed
fix(readme): label hot-path latency as the rule scorer, disclose cross-model holdout

vaaraio
and
claude
committed
fix(llms.txt): refresh stale classifier numbers and lead with runtime evidence

vaaraio
and
claude
committed
docs(changelog): record the audit-finding fix bundle under Unreleased

vaaraio
and
claude
committed
fix(mcp-proxy): pin the validated upstream IP at connect time (DNS-rebind safe)

vaaraio
and
claude
committed
chore(release): v0.45.1 SSRF DNS-rebind closure plus HTTP transport and SSE audit fixes

vaaraio
and
claude
committed