[Security] LobsterAI NIM outbound media flow allows arbitrary host-local file exfiltration via assistant-generated absolute paths #1010
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Welcome | |
| on: | |
| pull_request_target: | |
| types: [opened] | |
| issues: | |
| types: [opened] | |
| jobs: | |
| welcome: | |
| runs-on: ubuntu-latest | |
| permissions: | |
| issues: write | |
| pull-requests: write | |
| steps: | |
| - uses: actions/first-interaction@2ec0f0fd78838633cd1c1342e4536d49ef72be54 # v1 | |
| with: | |
| repo-token: ${{ secrets.GITHUB_TOKEN }} | |
| issue-message: | | |
| 👋 感谢你提交第一个 Issue！欢迎参与 LobsterAI 社区。 | |
| 请确认已完成以下事项： | |
| - 完整填写 Issue 模板 | |
| - 搜索已有 Issue，避免重复提交 | |
| - 提供复现步骤（Bug 类） | |
| 我们会尽快处理，感谢你的贡献！ | |
| --- | |
| 👋 Thanks for opening your first issue! We appreciate your contribution to LobsterAI. | |
| Please make sure you've: | |
| - Filled out the issue template completely | |
| - Searched for existing issues to avoid duplicates | |
| - Provided steps to reproduce (for bugs) | |
| We'll review your issue as soon as possible. | |
| pr-message: | | |
| 👋 感谢你提交第一个 Pull Request！欢迎参与 LobsterAI 社区。 | |
| 请确认 PR 已满足以下要求： | |
| - 遵循 [Conventional Commits](https://www.conventionalcommits.org/) 规范 | |
| - 包含清晰的变更说明 | |
| - UI 变更附上截图 | |
| - 通过所有 CI 检查 | |
| 维护者会尽快 Review，感谢你的贡献！ | |
| --- | |
| 👋 Thanks for your first pull request to LobsterAI! We appreciate your contribution. | |
| Please make sure your PR: | |
| - Follows the [Conventional Commits](https://www.conventionalcommits.org/) spec | |
| - Includes a clear description of the changes | |
| - Has screenshots for UI changes | |
| - Passes all CI checks | |
| A maintainer will review your PR soon. Thank you! 🚀 |