Server-side Request Forgery (SSRF)

Overview web3 is a web3: A Python library for interacting with Ethereum Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the CCIP Read process. An attacker can cause the application to make arbitrary HTTP requests to internal or external destinations by...

Langflow 安全漏洞

Langflow is an open-source visualization framework developed by Langflow for building multi-agent and RAG applications. Versions of Langflow prior to 1.5.1 contained security vulnerabilities. These vulnerabilities stemmed from a lack of ownership checks in the readflow assistant, which could allo...

PT-2022-36716 · Libraw · Libraw

Name of the Vulnerable Software and Affected Versions: LibRaw affected versions not specified Description: The issue is related to a stack-buffer-overflow error. Technical details about the error include the function names xtrans interpolate and dcraw process, which are part of the LibRaw library...