Server-side Request Forgery (SSRF)

Overview a2ui-agent-sdk is an A2UI Agent SDK Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the httpx.get function in the FileResolver component. An attacker can access internal resources or services by sending crafted requests to arbitrary URLs...