vrr/agent-zero
2
0
Fork 0
mirror of https://github.com/agent0ai/agent-zero.git synced 2026-04-26 10:41:29 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1
agent-zero/helpers
History
Exact
Alessandro 91f43e28b4 fix: preserve safe remote fetch compatibility for public sites 
Restore remote document fetch compatibility for public sites after the
CVE-2026-4308 SSRF hardening.

The initial security fix correctly blocked non-public destinations, but
it also changed the outbound request fingerprint for `document_query`
remote fetches. Some public sites, including https://nvd.nist.gov/vuln/detail/CVE-2026-4308, used for testing, responded with HTTP
403 to the default `requests` user agent even though they remained safe
and publicly routable.

This change keeps the centralized SSRF protections in place while
restoring the previous request compatibility behavior by sending the
configured `USER_AGENT` header, falling back to the prior
`@mixedbread-ai/unstructured` value.

What is fixed:
- public URLs such as
  `https://nvd.nist.gov/vuln/detail/CVE-2026-4308`
  no longer fail with site-specific HTTP 403 due to request fingerprint
  changes introduced by the SSRF mitigation
2026-04-12 02:08:13 +02:00
..
api.py enable api caching 2026-03-30 17:15:50 +02:00
attachment_manager.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
backup.py refactor: replace PathSpec "gitignore" pattern type with "gitwildmatch" 2026-03-22 21:50:13 +01:00
browser.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
cache.py refactor: add file system watchdog support for API handlers, extensions, and plugins 2026-03-18 21:07:33 +01:00
call_llm.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
cloudflare_tunnel._py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
context.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
context_utils.py refactor: Backend core rewrite - WsHandler + WsManager + handler migration 2026-03-26 00:58:01 -07:00
crypto.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
defer.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
dirty_json.py stop tool dispatch at first completed json object 2026-04-03 16:56:21 +02:00
docker.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
document_query.py Fix SSRF in document_query remote fetching (CVE-2026-4308) 2026-04-12 02:00:01 +02:00
dotenv.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
duckduckgo_search.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
email_client.py refactor - plugin names and builtin plugins 2026-03-10 22:20:53 +01:00
errors.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
extension.py Move subagents import to function scope to avoid circular import 2026-03-26 12:39:08 +01:00
extract_tools.py stop tool dispatch at first completed json object 2026-04-03 16:56:21 +02:00
faiss_monkey_patch.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
fasta2a_client.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
fasta2a_server.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
file_browser.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
file_tree.py refactor: replace PathSpec "gitignore" pattern type with "gitwildmatch" 2026-03-22 21:50:13 +01:00
files.py refactor: consolidate module loading utilities and add plugin lifecycle improvements 2026-03-23 21:13:25 +01:00
functions.py refactor: consolidate module loading utilities and add plugin lifecycle improvements 2026-03-23 21:13:25 +01:00
git.py Add latest selector option to self-update with branch head resolution for testing/development and newest tag resolution for main 2026-03-26 10:44:12 +01:00
guids.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
history.py refactor(chat_branching): ID-based log ↔ history linking for precise branch trimming 2026-03-24 03:04:09 -07:00
images.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
integration_commands.py integrations: add native chat controls and email config presets 2026-04-11 18:49:13 +02:00
job_loop.py feat: Add email integration plugin with IMAP/Exchange polling and SMTP reply 2026-03-15 10:59:48 +08:00
kokoro_tts.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
kvp.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
localization.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
log.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
login.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
mcp_handler.py refactor(chat_branching): ID-based log ↔ history linking for precise branch trimming 2026-03-24 03:04:09 -07:00
mcp_server.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
message_queue.py refactor(chat_branching): ID-based log ↔ history linking for precise branch trimming 2026-03-24 03:04:09 -07:00
messages.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
migration.py refactor: comprehensive UI server restructuring and self-update enhancements 2026-03-31 15:20:57 +02:00
modules.py refactor: consolidate module loading utilities and add plugin lifecycle improvements 2026-03-23 21:13:25 +01:00
network.py fix: preserve safe remote fetch compatibility for public sites 2026-04-12 02:08:13 +02:00
notification.py Add tool request validation and plugin change notifications 2026-03-10 13:08:48 +01:00
performance.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
perplexity_search.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
persist_chat.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
plugins.py fix: guard against missing plugin directory in config loads 2026-04-01 20:42:24 +02:00
print_catch.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
print_style.py Sanitize print logs; refactor popular plugin logic 2026-03-30 11:50:59 +02:00
process.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
projects.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
providers.py Remove redundant provider reload call from plugin change handler 2026-03-12 07:31:45 +01:00
rate_limiter.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
rfc.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
rfc_exchange.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
rfc_files.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
runtime.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
searxng.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
secrets.py feat(secrets): add @extensible decorator to secrets factory functions 2026-03-12 15:30:50 +00:00
security.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
self_update.py refactor: comprehensive UI server restructuring and self-update enhancements 2026-03-31 15:20:57 +02:00
server_startup.py refactor: comprehensive UI server restructuring and self-update enhancements 2026-03-31 15:20:57 +02:00
settings.py refactor: remove browser_http_headers config and add safe_call utility for plugin hooks 2026-03-20 12:43:25 +01:00
skills.py add a0-setup-cli Skill and restore lexical trigger matching 2026-04-11 18:03:05 +02:00
skills_cli.py add a0-setup-cli Skill and restore lexical trigger matching 2026-04-11 18:03:05 +02:00
skills_import.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
state_monitor.py refactor: extract constants, deduplicate ack pattern 2026-03-28 02:51:57 -07:00
state_monitor_integration.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
state_snapshot.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
strings.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
subagents.py refactor: improve caching system and optimize extension/plugin path resolution 2026-03-18 12:40:33 +01:00
task_scheduler.py refactor(chat_branching): ID-based log ↔ history linking for precise branch trimming 2026-03-24 03:04:09 -07:00
timed_input.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
tokens.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
tool.py refactor(chat_branching): ID-based log ↔ history linking for precise branch trimming 2026-03-24 03:04:09 -07:00
tunnel_manager.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
ui_server.py refactor: comprehensive UI server restructuring and self-update enhancements 2026-03-31 15:20:57 +02:00
update_check.py Revert update check API endpoint from tapi.agent-zero.ai back to api.agent-zero.ai 2026-03-25 18:53:38 +01:00
vector_db.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
wait.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
watchdog.py fix: create watch directory if it doesn't exist instead of raising FileNotFoundError 2026-03-19 20:52:35 +01:00
whisper.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00
ws.py enable api caching 2026-03-30 17:15:50 +02:00
ws_manager.py refactor: extract constants, deduplicate ack pattern 2026-03-28 02:51:57 -07:00
yaml.py BIG PYTHON REFACTOR 2026-03-05 17:28:11 +01:00