Lucene search
+L

1 matches found

OSV
OSV
added 2026/07/23 11:41 a.m.8 views

PYSEC-2026-3519 PraisonAI: Jobs webhook SSRF protection bypass via DNS rebinding

Jobs webhook SSRF protection bypass via DNS rebinding Summary PraisonAI's Async Jobs API validates webhookurl when a job request is parsed and again when the internal Job object is constructed. That validation blocks direct loopback/private targets, but it is not bound to the later network reques...

7.2CVSS5.7AI score
SaveExploits0References5
Rows per page
Query Builder