20432 matches found
Server-side Request Forgery (SSRF)
Overview request-filtering-agent is an An https.Agent implementation that block request Private IP address. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the HTTPS request handling process. An attacker can access internal services by sending specially...
CVE-2025-57814
request-filtering-agent is an https.Agent implementation that blocks requests to Private/Reserved IP addresses. Versions 1.x.x and earlier contain a vulnerability where HTTPS requests to 127.0.0.1 bypass IP address filtering, while HTTP requests are correctly blocked. This allows attackers to...
CVE-2025-57814 request-filtering-agent SSRF Bypass via HTTPS Requests
request-filtering-agent is an https.Agent implementation that blocks requests to Private/Reserved IP addresses. Versions 1.x.x and earlier contain a vulnerability where HTTPS requests to 127.0.0.1 bypass IP address filtering, while HTTP requests are correctly blocked. This allows attackers to...
CVE-2025-57814 request-filtering-agent SSRF Bypass via HTTPS Requests
request-filtering-agent is an https.Agent implementation that blocks requests to Private/Reserved IP addresses. Versions 1.x.x and earlier contain a vulnerability where HTTPS requests to 127.0.0.1 bypass IP address filtering, while HTTP requests are correctly blocked. This allows attackers to...
GHSA-PW25-C82R-75MM request-filtering-agent SSRF Bypass via HTTPS Requests to 127.0.0.1
request-filtering-agent versions 1.x.x and earlier contain a vulnerability where HTTPS requests to 127.0.0.1 bypass IP address filtering, while HTTP requests are correctly blocked. Impact: Vulnerable patterns requests that should be blocked but are allowed: - https://127.0.0.1:443/api -...
Safeguarding VS Code against prompt injections
The Copilot Chat extension for VS Code has been evolving rapidly over the past few months, adding a wide range of new features. Its new agent mode lets you use multiple large language models LLMs, built-in tools, and MCP servers to write code, make commit requests, and integrate with external...
Langflow 安全漏洞
Langflow is a visualization framework for building multi-agent and RAG applications open-sourced by Langflow. A security vulnerability exists in Langflow that stems from improper management of permissions within a container, which could lead to elevation of privilege...
request-filtering-agent 代码问题漏洞
request-filtering-agent is an application by azu Personal Developers. A code issue vulnerability exists in request-filtering-agent version 1.x.x and prior versions that stems from HTTPS requests bypassing IP address filtering, which could lead to accessing internal services bypassing SSRF...
PT-2025-34712 · Pypi · Request-Filtering-Agent
Name of the Vulnerable Software and Affected Versions: request-filtering-agent versions 1.x.x and earlier Description: request-filtering-agent is an https.Agent implementation designed to block requests to Private/Reserved IP addresses. HTTPS requests to 127.0.0.1 bypass IP address filtering, whi...
Linux Distros Unpatched Vulnerability : CVE-2019-10066
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Open Ticket Request System OTRS 7.x through 7.0.6, Community Edition 6.0.x through 6.0.17, and OTRSAppointmentCalendar 5.0.x through...
Malicious code in spelunker-agent (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in markdown-agent (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41392 Malicious code in markdown-agent (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in greeting-agent (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41389 Malicious code in greeting-agent (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in default-agent-provider (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41381 Malicious code in default-agent-provider (npm)
The package communicates with a domain associated with malicious activity...
MAL-2025-41373 Malicious code in browser-typeagent (npm)
The package communicates with a domain associated with malicious activity...