Security hardening release addressing CodeQL and Dependabot alerts: - Fix stack trace exposure in error responses - Add SSRF protection with DNS resolution checking - Implement proper URL hostname validation (replaces substring matching) - Add centralized path sanitization to prevent path traversal - Fix ReDoS vulnerability in email validation regex - Improve HTML sanitization in validation utilities - Fix capability wildcard matching in auth utilities - Update glob dependency to address CVE - Add CodeQL suppression comments for verified false positives 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
16 lines
624 B
Markdown
16 lines
624 B
Markdown
## ⚠️ Pull Requests Not Accepted
|
|
|
|
GT AI OS Community is a **read-only distribution** of GT AI OS.
|
|
|
|
**We do not accept pull requests.** This PR will be closed without review.
|
|
|
|
---
|
|
|
|
### How to Contribute
|
|
|
|
- **Bug reports:** [Open an issue](https://github.com/GT-Edge-AI-Internal/gt-ai-os-community/issues/new?template=bug_report.md)
|
|
- **Feature requests:** [Open an issue](https://github.com/GT-Edge-AI-Internal/gt-ai-os-community/issues/new?template=feature_request.md)
|
|
- **Questions:** [Start a discussion](https://github.com/GT-Edge-AI-Internal/gt-ai-os-community/discussions)
|
|
|
|
Thank you for your interest in GT AI OS!
|