…rusted content, and these controls do not prevent SSRF. Includes regression tests for local-file disclosure payloads, plain-text file URLs, the one-time initial-document

Highlights - Security fix (CWE-918, SSRF): Article.parse() fetches images by default, and it took image URLs straight from the page ( <img src , og:image ). The only vali

… PostgreSQL 13 or older. - New secure defaults: - SSRF PROTECTION ENABLED=true : outbound requests to private or local network addresses are blocked. This affects URL imp

Security - Fixes an SSRF guard bypass in which the IPv6 unspecified address :: could reach services listening on IPv6 loopback. IPv4 and IPv6 unspecified addresses, inclu

…一约束、分布式锁和幂等回读；并发及多实例请求可复用同一赢家。 - Milvus 删除生命周期、爬虫 SSRF/DNS 重绑定防护和生产配置校验得到加固。 - 前端鉴权、本地缓存与 IndexedDB 按用户/租户作用域隔离，阻止切换作用域后的迟到写入。 - 检索配置保留部署指定的本地 reranker，避免默认 profile 意外退回远

… should upgrade immediately. Security Fix - Fixed SSRF and Path Traversal vulnerabilities in subtitle download (CVE-2025-34452) Credit: Valentin Lobstein (Chocapikk)