monolabsdev/openbench-ai

v0.1.1 Security

This release includes 1 security fix for security teams reviewing exposed deployments.

Published 14d LLM Frameworks

✓ No known CVEs patched

This release patches 1 known CVE

Topics

local-llm multi-model offline-ai ollama privacy-first tauri

Affected surfaces

rce_ssrf breaking_upgrade

Summary

AI summary

Fixed NSIS installer executing unverified code from the internet.

Full changelog

Fixed NSIS installer hook executing unverified code from the internet (irm ... | iex during install). Ollama installer is now downloaded at build time, bundled into the .exe, and verified before execution.
Added bun run ollama-setup script that automates building with bundled Ollama installer.
Added proper error handling in the NSIS installer hook with user-visible messages on failure.

[!NOTE]
Ollama + Openbench installer will take longer depending on internet speed and computer performance.

builds a seperate setup that installs ollama aswell by @TheoSlater in https://github.com/TheoSlater/openbench/pull/25

@TheoSlater made their first contribution in https://github.com/TheoSlater/openbench/pull/25

Full Changelog: https://github.com/TheoSlater/openbench/compare/v0.1.0...v0.1.1

Fixed NSIS installer hook executing unverified code from the internet (irm ... | iex during install); Ollama installer now downloaded at build time, bundled into .exe and verified before execution.

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track monolabsdev/openbench-ai

Get notified when new releases ship.

About monolabsdev/openbench-ai