whit3rabbitandClaude Opus 4.6 4a76511e38 fix(security): block IPv6 ULA (fc00::/7) and link-local (fe80::/10) in SSRF guard ...

The IPv6 arm of is_private_ip only checked loopback, unspecified, and
IPv4-mapped addresses. Unique Local Addresses and link-local addresses
were not blocked, allowing SSRF via URLs like http://[fc00::1]/v1.
Uses bitwise checks since Ipv6Addr::is_unique_local() is unstable.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-28 18:21:28 -05:00

..

src

fix(security): block IPv6 ULA (fc00::/7) and link-local (fe80::/10) in SSRF guard

2026-03-28 18:21:28 -05:00

Cargo.toml

feat: LiteLLM gap fill - chat completions input, Azure backend, virtual keys, client SDK

2026-03-25 20:09:40 -05:00