COMMITS
May 1, 2026
A
fix: SESSION_DIGEST_METHOD default to sha256, follow-up review polish
Ashesh Vashi committed
A
fix: SERVER_MODE python-test path and two endpoint regressions
Ashesh Vashi committed
A
fix: drop live Azure instance from session, persist auth state only
Ashesh Vashi committed
A
fix: drop pickled BigAnimal provider instance from session
Ashesh Vashi committed
A
fix: drop pickled Google cloud instance from session
Ashesh Vashi committed
A
fix: drop pickled RDS instance from session
Ashesh Vashi committed
A
fix: drop live AuthSourceManager from session, store provider name only
Ashesh Vashi committed
A
fix: symlink-based path traversal in file_manager (CWE-61/CWE-22) (#9902)
Ashesh Vashi committed
A
fix: pickle deserialization RCE in session manager (CWE-502) (#9901)
Ashesh Vashi committed
A
fix: Prevent OS command injection in Import/Export query export (CWE-78) (#9899)
Ashesh Vashi committed
A
fix: prevent SQL injection in Maintenance tool option values (#9898)
Ashesh Vashi committed
April 30, 2026
A
fix: prevent LFI and SSRF in LLM API configuration endpoints (#9900)
Ashesh Vashi committed
April 24, 2026
A
A
fix: Bump runtime and development dependencies (#9870)
Ashesh Vashi committed
April 23, 2026
A
fix: prevent XSS via innerHTML in browser tree and explain visualizer (#9865)
Ashesh Vashi committed
April 17, 2026
A
Updated yarn.lock file to use yarn v4.14.0 and fix the builds
Aditya Toshniwal committed
April 13, 2026
A
fix: SharedServer feature parity columns and write guards (#9835)
Ashesh Vashi committed
A
fix: customize container user permissions using PUID and PGID. #9657 (#9833)
Ashesh Vashi committed
April 9, 2026
A
fix: Bump runtime dependencies and upgrade ESLint to v10 (#9834)
Ashesh Vashi committed
A
fix: enforce data isolation and harden shared servers in server mode (#9830)
Ashesh Vashi committed
April 8, 2026
A
fix: Bump python & javascript dependencies (#9827)
Ashesh Vashi committed
April 6, 2026
R
fix(9656): Use absolute paths for a2enmod, a2enconf for debain setup script (#9815)
rztrainlocal committed
March 30, 2026
A
Updated version for release v9.14
Akshay Joshi committed
D
Support /v1/responses for OpenAI models. #9795
Dave Page committed
L
Czech translation for version 9.14
Libor M. committed
K
Revert "Update JavaScript dependencies."
Khushboo Vashi committed
March 27, 2026
K
Update Release Notes.
Khushboo Vashi committed
A
Update JavaScript dependencies.
Akshay Joshi committed
A
D
Updated Italian translation for v9.14.
Domenico Sgarbossa committed