-
v2.0.5 Stable
released this
2026-07-14 19:30:33 -07:00 | 24 commits to main since this releaseKaimon v2.0.5
Security & Claude Code compat patch.
- Security: removed a localhost OAuth auto-mint that issued bearer tokens to anyone who could reach the port (auth bypass); Kaimon now accepts only configured API keys, and
Originvalidation rejectslocalhost-spoof hosts (e.g.localhost.evil.test). - Compat: OAuth/OIDC probe paths return a clean 404 with a JSON error body, so modern Claude Code no longer crashes on discovery and keyless clients get a clear "Missing API key".
- Chore/CI: gitignore deploy artifacts; LinkCheck false-positive exclusion.
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Security: removed a localhost OAuth auto-mint that issued bearer tokens to anyone who could reach the port (auth bypass); Kaimon now accepts only configured API keys, and