All pull requests

Pull requests

• Fix GraphQL rate limiting

  #1240·timokoessler opened Oct 23, 2026Member·2/2·

  ·
  2

• Add new short circuit instrumentation

  #1239·timokoessler opened Oct 23, 2026Member·1/2·

  ·
  8

• Only update config from heartbeat if newer

  #1216·hansott opened Oct 9, 2026Member·

  ·
  1

• Handle all http server listener methods

  #1214·timokoessler opened Oct 9, 2026Member·

  ·
  4

• Capture cache read + write tokens for AI SDKs

  #1174·hansott opened Sep 25, 2026Member·

  ·
  1

• Fix Zen overriding vm context code generation option

  #1173·timokoessler opened Sep 25, 2026Member·

  ·
  2

• Add AI tool stats and blocking

  #1172·timokoessler opened Sep 24, 2026Member·

  ·
  2

• Add ai engine

  #1158·bitterpanda63 opened Sep 6, 2026Collaborator·

  ·
  18

• Re-use route and resolved IP address

  #1157·hansott opened Sep 4, 2026Member·

  ·
  1

• Check dynamic import for code injection

  #1156·timokoessler opened Sep 4, 2026Member·

  ·
  6

• Update deps

  #1135·hansott opened Aug 24, 2026Member·

  ·
  17

• Protect MongoDB command method

  #1096·timokoessler opened Jul 22, 2026Member·

  ·
  3

• Add IPv4 transition addresses to private ip detection

  #1082·timokoessler opened Jul 9, 2026Member·

  ·
  1

• Upgrade to TypeScript v6

  #1081·timokoessler opened Jul 9, 2026Member·

  ·
  1

• Implement new IP header parsing spec

  #1073·timokoessler opened Jun 26, 2026Member·

  ·
  18

• Port new shell injection algorithm from Zen PHP

  #1071·timokoessler opened Jun 25, 2026Member·

  ·
  2

• Normalize path separator for path traversal detection

  #1067·timokoessler opened Jun 24, 2026Member·

  ·
  2

• Check metadata of uploaded files

  #1046·timokoessler opened May 29, 2026Member·

  ·
  1

• Fix path traversal detection for absolute file URL

  #1035·timokoessler opened May 22, 2026Member·

  ·
  3

• Fix blocking exceptions on callback usage

  #1011·timokoessler opened Apr 24, 2026Member·

  ·
  1

• Update Node.js types to remove custom types

  #981·timokoessler opened Mar 27, 2026Member·

  ·
  2

• Fix handling of Maps and other non plain object types

  #970·timokoessler opened Mar 25, 2026Member·

  ·
  8

• Outbound blocking: support wildcard for subdomains

  #962·timokoessler opened Mar 12, 2026Member·

  ·
  2

• POC: Dynamic import protection

  #952·timokoessler opened Mar 4, 2026Member·

  ·

• Add tests and docs for tsup (bundler)

  #941·timokoessler opened Feb 20, 2026Member·

  ·
  1