34 matches found
http-tools (>=1.0.1, <=1.0.2), lyrebird (>=0.11.0, <=0.12.1) +2 more potentially affected by CVE-2025-23217 via mitmproxy (4.0.4)
mitmproxy PYPI version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - http-tools =1.0.1, =0.11.0, =1.2.1, =1.5.33, =1.5.41 Source cves: CVE-2025-23217 Source advisory: OSV:PYSEC-2026-1630...
comics-down (0.2.0), http-tools (1.1.0) potentially affected by CVE-2025-23217 via mitmproxy (5.0.1)
mitmproxy PYPI version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - comics-down 0.2.0 - http-tools 1.1.0 Source cves: CVE-2025-23217 Source advisory: OSV:PYSEC-2026-1630...
http-tools (4.0.0) potentially affected by CVE-2025-23217 via mitmproxy (10.1.5)
mitmproxy PYPI version 10.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - http-tools 4.0.0 Source cves: CVE-2025-23217 Source advisory: OSV:PYSEC-2026-1630...
cloudflyer (>=1.0.2, <=1.0.5), http-tools (5.0.0) +4 more potentially affected by CVE-2025-23217 via mitmproxy (>=11.0.0, <=11.0.2)
mitmproxy PYPI version =11.0.0, =1.0.2, =1.0.0, =1.0.0, =1.1.0, =0.1.0, =0.2.1 Source cves: CVE-2025-23217 Source advisory: OSV:PYSEC-2026-1630...
http-tools (>=1.0.1, <=1.0.2), lyrebird (>=0.11.0, <=0.12.1) +2 more potentially affected by CVE-2026-40606 via mitmproxy (4.0.4)
mitmproxy PYPI version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - http-tools =1.0.1, =0.11.0, =1.2.1, =1.5.33, =1.5.41 Source cves: CVE-2026-40606 Source advisory: OSV:PYSEC-2026-92...
comics-down (0.2.0), http-tools (1.1.0) potentially affected by CVE-2026-40606 via mitmproxy (5.0.1)
mitmproxy PYPI version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - comics-down 0.2.0 - http-tools 1.1.0 Source cves: CVE-2026-40606 Source advisory: OSV:PYSEC-2026-92...
http-tools (4.0.0) potentially affected by CVE-2026-40606 via mitmproxy (10.1.5)
mitmproxy PYPI version 10.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - http-tools 4.0.0 Source cves: CVE-2026-40606 Source advisory: OSV:PYSEC-2026-92...
http-tools (5.0.0), octotail (>=1.0.0, <=1.0.13) potentially affected by CVE-2026-40606 via mitmproxy (11.0.0)
mitmproxy PYPI version 11.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - http-tools 5.0.0 - octotail =1.0.0, =1.0.13 Source cves: CVE-2026-40606 Source advisory: OSV:PYSEC-2026-92...
bagbag (>=0.72.2, <=0.75.43), chameli (>=0.1.9, <=0.2.2) +8 more potentially affected by CVE-2026-40606 via mitmproxy (>=12.0.0, <=12.2.1)
mitmproxy PYPI version =12.0.0, =0.72.2, =0.1.9, =6.0.0, =3.7.6, =2.0.0b0, =0.1.0, =0.0.2, =0.1.0, =3.2.5, =3.2.7 Source cves: CVE-2026-40606 Source advisory: OSV:PYSEC-2026-92...
http-tools (>=1.0.1, <=1.0.2), lyrebird (>=0.11.0, <=0.12.1) +2 more potentially affected by CVE-2026-40606 via mitmproxy (4.0.4)
mitmproxy PYPI version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - http-tools =1.0.1, =0.11.0, =1.2.1, =1.5.33, =1.5.41 Source cves: CVE-2026-40606 Source advisory: OSV:GHSA-527G-3W9M-29HV...
comics-down (0.2.0), http-tools (1.1.0) potentially affected by CVE-2026-40606 via mitmproxy (5.0.1)
mitmproxy PYPI version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - comics-down 0.2.0 - http-tools 1.1.0 Source cves: CVE-2026-40606 Source advisory: OSV:GHSA-527G-3W9M-29HV...
http-tools (4.0.0) potentially affected by CVE-2026-40606 via mitmproxy (10.1.5)
mitmproxy PYPI version 10.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - http-tools 4.0.0 Source cves: CVE-2026-40606 Source advisory: OSV:GHSA-527G-3W9M-29HV...
http-tools (5.0.0), octotail (>=1.0.0, <=1.0.13) potentially affected by CVE-2026-40606 via mitmproxy (11.0.0)
mitmproxy PYPI version 11.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - http-tools 5.0.0 - octotail =1.0.0, =1.0.13 Source cves: CVE-2026-40606 Source advisory: OSV:GHSA-527G-3W9M-29HV...
CVE-2026-34162
FastGPT is an AI Agent building platform. Prior to version 4.14.9.5, the FastGPT HTTP tools testing endpoint /api/core/app/httpTools/runTool is exposed without any authentication. This endpoint acts as a full HTTP proxy — it accepts a user-supplied baseUrl, toolPath, HTTP method, custom headers,...
CVE-2026-34162 FastGPT: Unauthenticated SSRF via httpTools Endpoint Leads to Internal API Key Theft
FastGPT is an AI Agent building platform. Prior to version 4.14.9.5, the FastGPT HTTP tools testing endpoint /api/core/app/httpTools/runTool is exposed without any authentication. This endpoint acts as a full HTTP proxy — it accepts a user-supplied baseUrl, toolPath, HTTP method, custom headers,...
CVE-2026-34162
Product: FastGPTVulnerability: Unauthenticated SSRF via the /api/core/app/httpTools/runTool endpointImpact: Potential internal API key theft; full server-side HTTP proxy behavior exposes response dataAffected versions: before 4.14.9.5Fix/mitigation: Upgrade to 4.14.9.5 (patched)CVSSv3.1: 10.0 (CR...
CVE-2026-34162 FastGPT: Unauthenticated SSRF via httpTools Endpoint Leads to Internal API Key Theft
FastGPT is an AI Agent building platform. Prior to version 4.14.9.5, the FastGPT HTTP tools testing endpoint /api/core/app/httpTools/runTool is exposed without any authentication. This endpoint acts as a full HTTP proxy — it accepts a user-supplied baseUrl, toolPath, HTTP method, custom headers,...
http-tools (>=1.0.1, <=1.0.2), lyrebird (>=0.11.0, <=0.12.1) +2 more potentially affected by unknown CVE via mitmproxy (4.0.4)
mitmproxy PYPI version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - http-tools =1.0.1, =0.11.0, =1.2.1, =1.5.33, =1.5.41 Source cves: unknown CVE Source advisory: OSV:GHSA-63CX-G855-HVV4...
comics-down (0.2.0), http-tools (1.1.0) potentially affected by unknown CVE via mitmproxy (5.0.1)
mitmproxy PYPI version 5.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - comics-down 0.2.0 - http-tools 1.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-63CX-G855-HVV4...
http-tools (4.0.0) potentially affected by unknown CVE via mitmproxy (10.1.5)
mitmproxy PYPI version 10.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - http-tools 4.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-63CX-G855-HVV4...