LocalAI

0 Fork 0

mirror of https://github.com/mudler/LocalAI.git synced 2026-11-05 20:13:23 -05:00

Files

T

Ettore Di Giacinto 024b7196de fix(mcpconns): guard the dial when private addresses are allowed

With mcp_connectors_allow_private on, a connector used a plain transport
with the environment proxy and no address check, so its URL could reach
cloud metadata addresses. Build the private path on the safehttp guard
with private addresses allowed: it resolves once, checks every answer,
and keeps the metadata addresses blocked. An optional DenyAddrs hook
refuses further addresses, for example the server's own.

Assisted-by: Claude Code:claude-sonnet-5-5
Signed-off-by: Ettore Di Giacinto <mudler@localai.io>

2026-11-03 08:39:12 +00:00

application

fix(studio): reap only stale turns when the database is shared

2026-11-03 08:38:53 +00:00

backend

feat(realtime): LFM3-Audio speech-to-speech on llama.cpp, remove liquid-audio (#12958 )

2026-10-29 22:06:41 +01:00

cli

feat(addons): declare typed host capabilities (#13034 )

2026-11-02 23:50:40 +00:00

clients

security(http): refuse redirects on outbound clients via hardened pkg/httpclient (#10087 )