Jason Woltje 25d2958fe4 fix(SEC-ORCH-20): Bind orchestrator to 127.0.0.1 by default ...

Change default bind address from 0.0.0.0 to 127.0.0.1 to prevent
the orchestrator API from being exposed on all network interfaces.
The bind address is now configurable via HOST or BIND_ADDRESS env
vars for Docker/production deployments that need 0.0.0.0.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-06 13:42:51 -06:00

..

api

fix(SEC-API-12): Throw error when CurrentUser decorator has no user

2026-02-06 13:39:13 -06:00

coordinator

fix(#338): Sanitize issue body for prompt injection

2026-02-05 18:36:16 -06:00

orchestrator

fix(SEC-ORCH-20): Bind orchestrator to 127.0.0.1 by default

2026-02-06 13:42:51 -06:00

web

fix(CQ-WEB-3): Fix race condition in LinkAutocomplete

2026-02-06 13:18:23 -06:00