26 matches found
local-deep-research has an SSRF bypass in `safe_get`
SummaryThe URL checking logic in local-deep-research has a logical flaw that could be bypassed by attackers, leading to SSRF attacks. DetailsThe current project uses validateurl to validate the input URL. The main logic is to perform security checks on the host portion of the URL extracted by...
5CVSS6.2AI score0.00247EPSS
SaveExploits0References10Affected Software1
20