fix(distribution): validate token realm on pull and re-challenge paths - #1038

Merged

ilopezluna merged 2 commits into

mainfrom

fix/ssrf-token-realm-pull-path

Aug 11, 2026

Commits on Aug 11, 2026

fix(distribution): validate token realm on pull and re-challenge paths
ilopezluna
committed
5ad45e5
test(distribution): add endpoint-level SSRF regression for model pull
ilopezluna
committed
bde712d