jubnl 4ad8146dbf fix(security): re-validate LLM endpoint fetch redirects per hop (GHSA-fmq9) ...

safeFetchLlm left undici's default redirect:'follow', so a configured LLM
endpoint could 302 to http://169.254.169.254/ and reach cloud-metadata
credentials — the DNS pin does not cover an IP-literal redirect hop, since
net.connect skips the pinned lookup for a literal IP. Follow redirects
manually now, re-resolving/re-checking/re-pinning each hop (allowing LAN/
localhost as before). Also block the Alibaba metadata IPs directly.

2026-07-11 21:58:14 +02:00

..

ssrfGuard.test.ts

fix(security): re-validate LLM endpoint fetch redirects per hop (GHSA-fmq9)

2026-07-11 21:58:14 +02:00