Lucene search
+L

3 matches found

PyPA
PyPA
•added 2026/07/07 4:03 p.m.•39 views

Local Deep Research is Vulnerable to Server-Side Request Forgery (SSRF) in Download Service

SummaryThe download service downloadservice.py makes HTTP requests using raw requests.get without utilizing the application's SSRF protection saferequests.py. This can allow attackers to access internal services and attempt to reach cloud provider metadata endpoints AWS/GCP/Azure, as well as...

6.5CVSS6AI score0.00318EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder