PT-2026-35320

Summary langchain-openai's url to size helper used by get num tokens from messages for image token counting validated URLs for SSRF protection and then fetched them in a separate network operation with independent DNS resolution. This left a TOCTOU / DNS rebinding window: an attacker-controlled...