Lucene search
+L

6 matches found

NVD
NVD
•added 2026/11/10 5:17 p.m.•6 views

CVE-2026-63651

LiveDocs is a primary-source-first documentation for AI agents. Prior to version 0.7.0, fetchdocs and introspect kinds openapi/graphql, and resolvesource's docsurl pass a client-supplied URL straight to URLSession with no scheme or host allowlist, and redirects are followed unconditionally. A...

8.7CVSS0.00249EPSS
SaveExploits0References2
Mend
Mend
•added 2026/11/10 4:25 p.m.•2 views

CVE-2026-63651

LiveDocs is a primary-source-first documentation for AI agents. Prior to version 0.7.0, fetchdocs and introspect kinds openapi/graphql, and resolvesource's docsurl pass a client-supplied URL straight to URLSession with no scheme or host allowlist, and redirects are followed unconditionally. A...

8.7CVSS5.9AI score0.00249EPSS
SaveExploits0References2
CVE
CVE
•added 2026/11/10 4:25 p.m.•10 views

CVE-2026-63651

Prior to version 0.7.0 , LiveDocs is vulnerable to a Server-Side Request Forgery (SSRF) via its fetch_docs and introspect functions. The software passes client-supplied URLs to URLSession without any scheme or host allowlist and follows redirects unconditionally. An attacker can use a prompt-inje...

8.7CVSS5.9AI score0.00249EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/11/10 4:25 p.m.•25 views

CVE-2026-63651 LiveDocs: fetch_docs/introspect fetch client-supplied URLs with no host allowlist and follow redirects

LiveDocs is a primary-source-first documentation for AI agents. Prior to version 0.7.0, fetchdocs and introspect kinds openapi/graphql, and resolvesource's docsurl pass a client-supplied URL straight to URLSession with no scheme or host allowlist, and redirects are followed unconditionally. A...

8.7CVSS0.00249EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/11/10 12:00 a.m.•4 views

CVE-2026-63651: PsychQuant livedocs: LiveDocs is a primary-source-first documentation for AI agents

LiveDocs is a primary-source-first documentation for AI agents. Prior to version 0.7.0, fetchdocs and introspect kinds openapi/graphql, and resolvesource's docsurl pass a client-supplied URL straight to URLSession with no scheme or host allowlist, and redirects are followed unconditionally. A...

8.7CVSS5.9AI score0.00249EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/11/10 12:00 a.m.•4 views

PT-2026-141805

LiveDocs is a primary-source-first documentation for AI agents. Prior to version 0.7.0, fetch docs and introspect kinds openapi/graphql, and resolve source's docs url pass a client-supplied URL straight to URLSession with no scheme or host allowlist, and redirects are followed unconditionally. A...

8.7CVSS5.9AI score0.00249EPSS
SaveExploits0References3
Rows per page
Query Builder