@livekit/agents-plugin-openai@1.9.1 v1.1.1
medium risk
BITyia/DroneSplatSep 26, 2026 → Sep 26, 20260 days between releases
What's New
OpenAI plugin query params preserved; MinerU Cloud SSRF vulnerabilities fixed.
Breaking Changes
- MinerU Cloud requests no longer follow redirects
- Address-policy refusals are not retried
New Features
- Secure handling of MinerU Cloud provider-supplied URLs with size bounds
Improvements
- Redirects are blocked and size limits enforced during download
- IPv4-compatible IPv6 addresses blocked by SSRF guard
Bug Fixes
- MinerU Cloud parsing fetched provider-supplied URLs without the address policy
Upgrade Notes
MinerU Cloud deployments may fail if they relied on redirects or address-policy refusals; self-hosted setups with ALLOW_LOCAL_NETWORKS enabled remain unaffected.
The Two Releases
@livekit/agents-plugin-openai@1.9.1
@livekit/agents-plugin-openai@1.9.1
Sep 26, 2026· 26 days ago
Patch release fixing query parameter preservation in OpenAI realtime connections.
Full release notesv1.1.1
OpenMAIC v1.1.1 — Security
Sep 26, 2026· 26 days ago
A security patch addressing SSRF vulnerabilities in MinerU Cloud provider URL fetching.
Full release notes