LocalAI

0 Fork 0

mirror of https://github.com/mudler/LocalAI.git synced 2026-10-28 17:18:49 -04:00

Files

T

Ettore Di Giacinto 2009506233 fix(addons): read the loopback port file through os.Root

The persisted port file was read with a path built from the add-on
root, which gosec reports as a file inclusion through a variable. Open
it through os.Root so the name cannot leave the root, even by a
symbolic link, and require a regular file with no group or other
access. A looser file now fails closed instead of being trusted.

Assisted-by: Claude Code:claude-sonnet-5-5
Signed-off-by: Ettore Di Giacinto <mudler@localai.io>

2026-10-20 21:40:01 +00:00

application

feat(addons): ship Studio and Talk as add-ons instead of built-in pages

2026-10-20 21:40:00 +00:00

backend

fix(sound): enumerate expansion keys (#12787 )

2026-10-20 13:14:49 +02:00

cli

fix(addons): keep the loopback owner address stable across restarts

2026-10-20 20:54:44 +00:00

clients

security(http): refuse redirects on outbound clients via hardened pkg/httpclient (#10087 )