Tag: Port Exclusion

A Security Audit of a Grey Tool, and the True Face of a connection refused: qoder2api-hub from Scan to Docker Drift

Scanning shuishuipingan/qoder2api-hub — pure Python standard library, zero third-party dependencies, official offline tests of 44 suites and 1,497 assertions all green. Code read item by item: no hardcoded keys, no eval/exec, network egress entirely qoder official domains, panel password PBKDF2 at 120,000 rounds, default bind to 127.0.0.1 only. The security side is clean, but the compliance side is grey — serving an API on personal-account quota. Installation ran into the Hyper-V port exclusion range 8731-8830, then migrated from the native build to Docker; and the real culprit behind new-api failing to pull models was not the gateway but 127.0.0.1 inside a container pointing at itself. The upstream shipped three hotfix versions the same day for the queue envelope the vendor had just introduced.