All pull requests

Pull requests

• Harden compose port publishing to loopback

  #710·FrederickStempfle opened Sep 6, 2026Contributor·

  ·

• Harden the conda cleanup helper by removing shell execution

  #709·FrederickStempfle opened Sep 6, 2026Contributor·

  ·

• Harden the Gradio Settings tab against unattended config writes

  #707·FrederickStempfle opened Sep 6, 2026Contributor·

  ·

• Harden the container to run as a non-root user

  #706·FrederickStempfle opened Sep 6, 2026Contributor·

  ·

• Harden the extension error tab against information disclosure

  #705·FrederickStempfle opened Sep 6, 2026Contributor·

  ·

• Harden Gradio allowed_paths to prevent config disclosure

  #704·FrederickStempfle opened Sep 6, 2026Contributor·

  ·

• Harden generation logging against credential disclosure

  #703·FrederickStempfle opened Sep 6, 2026Contributor·

  ·

• Harden the startup banner against credential disclosure

  #702·FrederickStempfle opened Sep 6, 2026Contributor·

  ·

• Harden the file proxy against same-origin script execution

  #701·FrederickStempfle opened Sep 6, 2026Contributor·

  ·

• Harden the release workflow against credential and history leakage

  #699·FrederickStempfle opened Sep 6, 2026Contributor·

  ·

• Harden the installer downloads against MITM

  #698·FrederickStempfle opened Sep 6, 2026Contributor·

  ·

• Harden the database API endpoints against cross-user access

  #697·FrederickStempfle opened Sep 6, 2026Contributor·

  ·

• Harden the database API CORS and anonymous authentication

  #696·FrederickStempfle opened Sep 6, 2026Contributor·

  ·

• Harden the default database user against authentication bypass

  #695·FrederickStempfle opened Sep 6, 2026Contributor·

  ·

• Harden the install console to prevent stored XSS

  #694·FrederickStempfle opened Sep 6, 2026Contributor·

  ·

• Harden the extension installer to prevent shell injection

  #693·FrederickStempfle opened Sep 6, 2026Contributor·

  ·

• Harden the catalog message handler to prevent remote-triggered installs

  #692·FrederickStempfle opened Sep 6, 2026Contributor·

  ·

• Fix Model Location settings overwriting the rest of .env

  #691·FrederickStempfle opened Sep 6, 2026Contributor·

  ·

• Harden .env writing to prevent environment variable injection

  #690·FrederickStempfle opened Sep 6, 2026Contributor·

  ·

• Harden the history handlers to prevent path traversal

  #689·FrederickStempfle opened Sep 6, 2026Contributor·

  ·

• Harden torch.load by making the unsafe weights_only patch opt-in

  #686·FrederickStempfle opened Sep 6, 2026Contributor·

  ·
  1

• Harden getFile to prevent arbitrary file read and SSRF

  #684·FrederickStempfle opened Sep 6, 2026Contributor·

  ·

• Harden the local API routes against cross-origin requests

  #683·FrederickStempfle opened Sep 6, 2026Contributor·

  ·

• feat: add OrcaRouter Cloud TTS extension

  #681·XiaoHuo888-hue opened Aug 17, 2026·

  ·

• feat: add Voice Manager extension

  #650·TingTung93 opened Mar 27, 2026·6 tasks·

  ·
  1