10 matches found
CVE-2026-84301
FastGPT is an open-source LLM platform for building AI applications on a knowledge base. Prior to 4.15.2, the safe Axios request interceptor in packages/service/common/api/axios.ts validates a hostname with isInternalAddress before a later HTTP connection performs an independent DNS lookup,...
CVE-2026-84301 FastGPT safe axios SSRF guard still allows DNS rebinding TOCTOU on protected outbound requests
FastGPT is an open-source LLM platform for building AI applications on a knowledge base. Prior to 4.15.2, the safe Axios request interceptor in packages/service/common/api/axios.ts validates a hostname with isInternalAddress before a later HTTP connection performs an independent DNS lookup,...
CVE-2026-84301
The open-source LLM platform FastGPT is vulnerable to a DNS rebinding attack in versions prior to 4.15.2 . The root cause is a time-of-check/time-of-use (TOCTOU) flaw in the safe Axios request interceptor located in packages/service/common/api/axios.ts. The system validates a hostname using isInt...
CVE-2026-84301 FastGPT safe axios SSRF guard still allows DNS rebinding TOCTOU on protected outbound requests
FastGPT is an open-source LLM platform for building AI applications on a knowledge base. Prior to 4.15.2, the safe Axios request interceptor in packages/service/common/api/axios.ts validates a hostname with isInternalAddress before a later HTTP connection performs an independent DNS lookup,...
PT-2026-96838
Name of the Vulnerable Software and Affected Versions FastGPT versions prior to 4.15.2 Description A DNS rebinding issue exists in the safe Axios request interceptor located in packages/service/common/api/axios.ts. The system validates a hostname using the isInternalAddress function before the HT...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: tomcat10: tomcat10-10.1.54-1.hum1 noarch tomcat10-admin-webapps-10.1.54-1.hum1 noarch tomcat10-common-10.1.54-1.hum1 noarch tomcat10-docs-webapp-10.1.54-1.hum1 noarch...
MAL-2025-7841 Malicious code in @epc-libraries/common-api-responses (npm)
The package @epc-libraries/common-api-responses was found to contain malicious code...
[SECURITY] Fedora 40 Update: gnulib-0-50.20230709git.fc40
The GNU portability library is a macro system and C declarations and definitions for commonly-used API elements and abstracted system behaviors. It can be used to improve portability and other functionality in your program s...