Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/06/18 1:57 p.m.19 views

PraisonAI: Jobs webhook SSRF protection bypass via DNS rebinding

Jobs webhook SSRF protection bypass via DNS rebinding Summary PraisonAI's Async Jobs API validates webhookurl when a job request is parsed and again when the internal Job object is constructed. That validation blocks direct loopback/private targets, but it is not bound to the later network reques...

5.5AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder