decoluaandCursor 126aa244c5 fix(kiro): validate region to prevent SSRF (GHSA-6mwv-4mrm-5p3m) ...

Reject non-AWS region values before interpolating them into upstream
URLs and stop reflecting upstream response bodies to the client.

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-06-19 15:09:18 +07:00

..

auth

fix(security): re-auth on DB export/import + SSRF guard on web fetch

2026-06-13 11:40:35 +07:00

db

fix(usage): add missing await on getAdapter() in getRecentLogs

2026-06-17 10:08:36 +07:00

mcp

feat(cowork): re-enable Claude Cowork with preset-only stdio MCP

2026-06-08 15:35:37 +07:00

network

feat(proxy-pools): add support for deno deploy relays and fix layout overflow issues in proxy pools dashboard (#1437)

2026-05-26 11:21:49 +07:00

oauth

fix(kiro): validate region to prevent SSRF (GHSA-6mwv-4mrm-5p3m)

2026-06-19 15:09:18 +07:00

qoder

refactor(open-sse): registry consolidation + DRY media/oauth/adhoc cleanup

2026-06-14 13:15:48 +07:00

tunnel

fix(auth): real client IP rate-limiting + remote default-password guard

2026-06-08 12:10:02 +07:00

updater

chore: release v0.4.27

2026-05-09 22:48:07 +07:00

appUpdater.js

# v0.4.29 (2026-05-10)

2026-05-10 21:56:40 +07:00

consoleLogBuffer.js

Feat : console log

2026-03-02 09:31:16 +07:00

dataDir.js

fix(mitm): update Kiro API endpoint to runtime.us-east-1.kiro.dev

2026-06-08 09:43:45 +07:00

disabledModelsDb.js

feat(db): migrate from lowdb to SQLite with repos pattern

2026-05-09 17:48:20 +07:00

localDb.js

feat(db): migrate from lowdb to SQLite with repos pattern

2026-05-09 17:48:20 +07:00

mitmAliasCache.js

# v0.4.29 (2026-05-10)

2026-05-10 21:56:40 +07:00

providerNormalization.js

feat(xai): add xAI Grok provider with OAuth + API key auth + image

2026-05-21 11:33:18 +07:00

requestDetailsDb.js

feat(db): migrate from lowdb to SQLite with repos pattern

2026-05-09 17:48:20 +07:00

usageDb.js

feat(db): migrate from lowdb to SQLite with repos pattern

2026-05-09 17:48:20 +07:00