CVE-2024-56800: Server-Side Request Forgery (SSRF)

Firecrawl is a web scraper that allows users to extract the content of a webpage for a large language model. Versions prior to 1.1.1 contain a server-side request forgery SSRF vulnerability. The scraping engine could be exploited by crafting a malicious site that redirects to a local IP address...

envoy load shed points http1 server abort dispatch DoS

The vulnerability of the envoy.loadshedpoints.http1serverabortdispatch configuration on the proxy server is related to incorrect implementation of control flow management. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...