123197 matches found
PT-2026-59540
Summary PraisonAI's direct-prompt CLI automatically expands @url: mentions in raw prompt text before agent execution begins. If a prompt contains @url:, the CLI calls MentionsParser.process.... The @url: handler then performs a direct urllib.request.urlopen request to the attacker-controlled URL...
PT-2026-59590
A vulnerability has been found in PrefectHQ prefect up to 3.6.28.dev1. Affected by this vulnerability is the function validate restricted url of the component Webhook/Notification. The manipulation leads to time-of-check time-of-use. It is possible to initiate the attack remotely. The attack is...
CVE-2026-41041: Improper Handling of URL Encoding (Hex Encoding)
URL path injection via unencoded user-supplied identifiers vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 before 1.2.1. Users are recommended to upgrade to version 1.2.1, which fixes the issue...
PT-2026-57679
URL path injection via unencoded user-supplied identifiers vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 before 1.2.1. Users are recommended to upgrade to version 1.2.1, which fixes the issue...
PT-2026-59237
Description The LangSmith SDK's prompt pull methods pull prompt / pull prompt commit in Python, pullPrompt / pullPromptCommit in JS/TS fetch and deserialize prompt manifests from the LangSmith Hub. These manifests may contain serialized LangChain objects and model configuration that affect runtim...
PT-2026-60022
Summary The SSRF protection fix for https://github.com/vllm-project/vllm/security/advisories/GHSA-qh4c-xf7m-gxfc can be bypassed in the load from url async method due to inconsistent URL parsing behavior between the validation layer and the actual HTTP client. Affected Component - File:...
PT-2026-59658
Summary When parsing application/x-www-form-urlencoded bodies, QuerystringParser located the field separator with a two step lookup: it first scanned the entire remaining buffer for &, and only when no & existed anywhere ahead did it fall back to scanning for ;. For a body that uses ; as the...
Decidim - Push subscriptions can be abused for server-side requests
Description The push-subscription endpoint stores an attacker-controlled delivery URL, and the notification send path becomes an outbound-request sink when VAPID delivery is enabled. The practical result is an authenticated, stored, mostly blind SSRF primitive to arbitrary HTTPS endpoints reachab...
CVE-2020-26296
creationtimestamp| type| source ---|---|--- 2026-07-12 23:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqic67endd25...
CVE-2026-15508
Helicone ai-gateway (up to 0.2.0-beta.30) is affected. The flaw is in the AWS Metadata Service component, specifically the build_target_url function in ai-gateway/src/dispatcher/service.rs, where manipulating extracted_path_and_query can trigger server-side request forgery. Exploitation is possib...
CVE-2026-15508 Helicone ai-gateway AWS Metadata Service service.rs build_target_url server-side request forgery
A flaw has been found in Helicone ai-gateway up to 0.2.0-beta.30. This affects the function buildtargeturl of the file ai-gateway/src/dispatcher/service.rs of the component AWS Metadata Service. Executing a manipulation of the argument extractedpathandquery can lead to server-side request forgery...
CVE-2026-15508 Helicone ai-gateway AWS Metadata Service service.rs build_target_url server-side request forgery
A flaw has been found in Helicone ai-gateway up to 0.2.0-beta.30. This affects the function buildtargeturl of the file ai-gateway/src/dispatcher/service.rs of the component AWS Metadata Service. Executing a manipulation of the argument extractedpathandquery can lead to server-side request forgery...
GHSA-XX7V-HQXH-CJR9
creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:06+00:00| seen| https://t.me/securixykz/1284 2026-07-13 00:00:16+00:00| published-proof-of-concept| https://t.me/securixykz/1284...
Malicious code in api-changelly (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a94f4aa368f1838507a78dde78062b740a5853b516d9d32782d0264b539b724c The package declares preinstall: node index.js, which runs automatically on npm install. index.js collects installer identifiers os.hostname,...
CVE-2026-15543
creationtimestamp| type| source ---|---|--- 2026-07-12 18:27:49+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116908416613742285 2026-07-13 08:38:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjc4mqeda2i 2026-07-13 10:37:37+00:00| seen|...
CVE-2026-10668
creationtimestamp| type| source ---|---|--- 2026-07-12 17:38:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqhprwyn4c2z 2026-07-12 19:42:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqhwq52yrt2l...
GHSA-6FFX-8HJJ-JHHF
creationtimestamp| type| source ---|---|--- 2026-07-12 17:21:01+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqhotdnxkt22...
Malicious code in polymarket-kelly-math-stake (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cf5ba9cd75b1a773e3a04e6eb45778894e04fd1d55b2e8ad03ae97deb41d16 [email protected] runs a postinstall script scripts/install-check.cjs that fetches a JSON config from...
Server-side Request Forgery (SSRF)
Overview AstrBot is a 易上手的多平台 LLM 聊天机器人及开发框架 Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the ToolsRoute.testmcpconnection function. An attacker can make unauthorized requests to internal or external systems by supplying crafted input to the...