The shutdown API calls `process.exit(0)` on POST without any authentication or authorization checks. Any party that can reach this endpoint can terminate the server process, causing immediate service disruption. Affected files: route.js Signed-off-by: tuanaiseo <221258316+tuanaiseo@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| 9remote | ||
| auth | ||
| cli-tools | ||
| cloud | ||
| combos | ||
| init | ||
| keys | ||
| locale | ||
| models | ||
| oauth | ||
| pricing | ||
| provider-nodes | ||
| providers | ||
| proxy-pools | ||
| settings | ||
| shutdown | ||
| tags | ||
| translator | ||
| tunnel | ||
| usage | ||
| v1 | ||
| v1beta/models | ||
| version | ||