security: API hardening and dependency vulnerability reduction (rescan 2026-03-08)#769

Open

lhy8888 wants to merge 6 commits intoveops:masterfrom

lhy8888:codex/sec-python-rescan-20260308

Commits on Mar 7, 2026

security: harden script execution, auth hashing, and xss sinks
Codex Security Bot
committed

Commits on Mar 8, 2026

security: harden outbound HTTP calls and sanitize search highlights
Codex Security Bot
committed
security(api): remove shell injection and disable legacy weak auth hashes by default
Codex Security Bot
committed
security(deps): upgrade vulnerable Python packages in api runtime
Codex Security Bot
committed
fix(ui): guard axios error object access to prevent blank-page crash
Codex Security Bot
committed
fix(api): add builtin model bootstrap command for DCIM and IPAM
Codex Security Bot
committed