Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
•added 2026/07/30 2:48 p.m.•17 views

Flyto2 Core: Multiple HTTP-family modules fetch client-controlled URLs without the SSRF guard their siblings apply (SSRF to internal/metadata)

Summary Numerous HTTP-emitting modules core.api.httpget, core.api.httppost, graphql.query/graphql.mutation, monitor.httpcheck, communication.slacksend, notification.discord,slack,teams.sendmessage, ai.visionanalyze anthropic path, verify.visualdiff, browser.proxyrotate, and the agent/llm inline...

8.5CVSS5.9AI score0.00448EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder