Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Server-Side Request Forgery (SSRF) in HTMLHeaderTextSplitter [GHSA-fv5p-p927-qmxr]

Summary IBM Watson Speech Services Cartridge is vulnerable to Server-Side Request Forgery SSRF due to a flaw in HTMLHeaderTextSplitter.splittextfromurl that validates the initial URL using validatesafeurl but then performs the fetch with requests.get with redirects enabled the default...