GHSA-G23J-2VWM-5C25 local-deep-research has an SSRF bypass in `safe_get`

Summary The URL checking logic in local-deep-research has a logical flaw that could be bypassed by attackers, leading to SSRF attacks. Details The current project uses validateurl to validate the input URL. The main logic is to perform security checks on the host portion of the URL extracted by...

Server-side Request Forgery (SSRF)

Overview local-deep-research is an AI-powered research assistant with deep, iterative analysis using LLMs and web searches Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the safeget function. An attacker can access internal network resources by crafting a...

CVE-2025-60700

A command injection vulnerability exists in the D-Link DIR-882 router firmware, specifically affecting version DIR882A1_FW102B02 (and versions prior to it). The flaw resides in the prog.cgi and librcm.so binaries, where the sub_4455BC function stores user-supplied SetDMZSettings/IPAddress values ...