Files

HackWeasel b9dfb86260 GT AI OS Community Edition v2.0.33

Security hardening release addressing CodeQL and Dependabot alerts:

- Fix stack trace exposure in error responses
- Add SSRF protection with DNS resolution checking
- Implement proper URL hostname validation (replaces substring matching)
- Add centralized path sanitization to prevent path traversal
- Fix ReDoS vulnerability in email validation regex
- Improve HTML sanitization in validation utilities
- Fix capability wildcard matching in auth utilities
- Update glob dependency to address CVE
- Add CodeQL suppression comments for verified false positives

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2025-12-12 17:04:45 -05:00

904 B

Raw Permalink Blame History

Code of Conduct

Our Promise

We want GT AI OS to be a welcoming place for everyone, regardless of background or experience level.

How to Behave

Do:

Be kind and patient with others
Be respectful, even when you disagree
Accept feedback gracefully
Help others learn

Don't:

Insult or put down others
Harass anyone for any reason
Share others' private information
Be disruptive or offensive

What Happens If Someone Breaks These Rules

If someone is behaving badly, we may:

Give them a warning
Temporarily or permanently ban them from the community

How to Report a Problem

If someone is making you uncomfortable or breaking these rules:

Contact us at: Contact Us

We take all reports seriously and will respond as quickly as possible.

Attribution

This Code of Conduct is based on the Contributor Covenant, version 2.1.

904 B Raw Permalink Blame History