PT-2025-12121

Name of the Vulnerable Software and Affected Versions haotian-liu/llava version git c121f04 Description A Server-Side Request Forgery SSRF issue was discovered, allowing an attacker to make the server perform HTTP requests to arbitrary URLs. This could potentially access sensitive data that is on...

PT-2025-12111

Name of the Vulnerable Software and Affected Versions langgenius/dify version 0.9.1 Description The issue is related to a Server-Side Request Forgery SSRF vulnerability. This vulnerability exists due to the improper handling of the api endpoint parameter, allowing an attacker to make direct...

CVE-2024-11822: Server-Side Request Forgery (SSRF)

langgenius/dify version 0.9.1 contains a Server-Side Request Forgery SSRF vulnerability. The vulnerability exists due to improper handling of the apiendpoint parameter, allowing an attacker to make direct requests to internal network services. This can lead to unauthorized access to internal...

PT-2025-12107 · Llava · Llava

Name of the Vulnerable Software and Affected Versions: haotian-liu/llava version 1.2.0 Description: A vulnerability allows for Server-Side Request Forgery SSRF through the "/run/predict" endpoint. An attacker can gain unauthorized access to internal networks or the AWS metadata endpoint by sendin...

PT-2025-12249

Name of the Vulnerable Software and Affected Versions composiohq/composio version v0.4.2 Description A Server-Side Request Forgery SSRF issue exists, specifically in the "/api/actions/execute/WEBTOOL SCRAPE WEBSITE CONTENT" endpoint. This allows an attacker to read files, access AWS metadata, and...

CVE-2025-0508: Use of Weak Hash

A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows for the possibility of MD5 hash collisions in all versions. This can lead to workflows being inadvertently replaced due to the reuse of results from different configurations that produce the same MD5 hash. This...

CVE-2024-11603: Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery SSRF vulnerability exists in lm-sys/fastchat version 0.2.36. The vulnerability is present in the /queue/join? endpoint, where insufficient validation of the path parameter allows an attacker to send crafted requests. This can lead to unauthorized access to internal...

CVE-2024-11449: Server-Side Request Forgery (SSRF)

A vulnerability in haotian-liu/llava version 1.2.0 LLaVA-1.6 allows for Server-Side Request Forgery SSRF through the /run/predict endpoint. An attacker can gain unauthorized access to internal networks or the AWS metadata endpoint by sending crafted requests that exploit insufficient validation o...

CVE-2024-12392: Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery SSRF vulnerability exists in binary-husky/gptacademic version git 310122f. The application has a functionality to download papers from arxiv.org, but the URL validation is incomplete. An attacker can exploit this vulnerability to make the application access any URL,...

CVE-2024-12068: Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery SSRF vulnerability was discovered in haotian-liu/llava, affecting version git c121f04. This vulnerability allows an attacker to make the server perform HTTP requests to arbitrary URLs, potentially accessing sensitive data that is only accessible from the server, such...

CVE-2024-8952: Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery SSRF vulnerability exists in composiohq/composio version v0.4.2, specifically in the /api/actions/execute/WEBTOOLSCRAPEWEBSITECONTENT endpoint. This vulnerability allows an attacker to read files, access AWS metadata, and interact with local services on the system...

CVE-2024-12376: Server-Side Request Forgery (SSRF)

A Server-Side Request Forgery SSRF vulnerability was identified in the lm-sys/fastchat web server, specifically in the affected version git 2c68a13. This vulnerability allows an attacker to access internal server resources and data that are otherwise inaccessible, such as AWS metadata credentials...

CVE-2024-9042 vulnerabilities

Vulnerabilities for packages: rancher-agent, rancher-webhook-fips...

GHSA-VV39-3W5Q-974Q vulnerabilities

Vulnerabilities for packages: rancher-agent, rancher-webhook-fips...

AWS VDP: Amazon Kendra Intelligent Ranking Service Reporting "AWS Internal" for CloudTrail Events Generated from FIPS Endpoints

The AWS Kendra Intelligent Ranking service was found to incorrectly report the user-agent and network information as "AWS Internal" for four API endpoints that are FIPS endpoints. This issue can lead to the obscuring of request information that may be used to track down an adversary...

tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability

tj-actions/changed-files GitHub Action contains an embedded malicious code vulnerability that allows a remote attacker to discover secrets by reading Github Actions Workflow Logs. These secrets may include, but are not limited to, valid AWS access keys, GitHub personal access tokens PATs, npm...

AWS VDP: Non-Production API Endpoints for the Health Service Fail to Log to CloudTrail Resulting in Silent Permission Enumeration

The AWS Health service was found to have 11 non-production API endpoints that could be accessed using standard IAM credentials without logging to CloudTrail. This allowed for silent permission enumeration, where an adversary could test the capabilities of compromised credentials without generatin...

qiskit-aws-braket-provider (>=0.0.1, <=0.0.2) potentially affected by CVE-2025-2000 via qiskit (0.20.0)

qiskit PYPI version 0.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on qiskit and may be impacted: - qiskit-aws-braket-provider =0.0.1, =0.0.2 Source cves: CVE-2025-2000 Source advisory: OSV:GHSA-6M2C-76FF-6VRF...

Important: Red Hat Security Advisory: Red Hat build of OpenTelemetry 3.5.0 release

Red Hat build of OpenTelemetry 3.5.0 has been released Release of Red Hat OpenShift distributed tracing provides following security improvements, bug fixes, and new features. Breaking changes: Nothing Deprecations: In the Red Hat build of OpenTelemetry 3.5, the Loki Exporter, which is a temporary...

GHSA-QXP5-GWG8-XV66 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-attacher-fips, opa-fips, pulumi-language-java, k3d, addon-resizer-fips, prometheus-pushgateway, dcgm-exporter-fips, gptscript, terraform-provider-azapi-fips, flux-source-controller, kube-vip-fips, kube-logging-logging-operator,...