SSRF (Server-Side Request Forgery) vulnerability exists in the gradio-app/gradio repository, allowing attackers to scan and identify open ports within an internal network. By manipulating the 'file' parameter

SSRF vulnerability exists in the gradio-app/gradio due to insufficient validation of user-supplied URLs in the `/proxy` route. Attackers can exploit this vulnerability by manipulating the `self.replica_urls

attacker to force the service to retrieve data from an arbitrary URL, essentially providing SSRF and potentially injecting content into downstream tasks

LangChain before 0.0.317 allows SSRF via document_loaders/recursive_url_loader.py because crawling can proceed from an external server to an internal server

A Security Analysis of Verifiable Credential Verification Pipelines: Attack Surface Arising from JSON-LD/RDFC Canonicalization Compared with SD-JWT VC and mdoc

service (DoS) via poison graphs, context injection through @context, and server-side request forgery (SSRF) reachable via malicious URLs, all at default settings. A poison graph, whose blank-node references

MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints

PraisonAI is a multi-agent teams system. From version 4.5.126

OpenClaw is an agent gateway distributed as the npm package

OllamaDrama: Designing and Deploying a Honeypot to Measure Attacks on Exposed LLM Infrastructure

both the infrastructure and LLM layers. These included model management abuse, path traversal and SSRF probes, RCE and cryptocurrency mining payloads, resource exhaustion attempts, prompt injection, information extraction, and agent

MCP Atlassian: HTTP upload tools accept arbitrary server-local file

MCP Atlassian: Unauthenticated arbitrary local file read via upload_attachment

MCP Atlassian is a Model Context Protocol (MCP) server for

Chainlist has SSRF via MCP SSE and streamable-http transports that allows unauthenticated internal network access

PraisonAI: Webhook SSRF via DNS fail-open in `JobSubmitRequest.validate_webhook_url()` — bypass

praisonaiagents has an SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io

praisonaiagents web_crawl vulnerable to SSRF via redirect-following

PraisonAI is a multi-agent teams system. In versions 1.5.128

Open WebUI: DNS Rebinding SSRF Bypass

Open WebUI: Any authenticated user can reach internal services and

Open WebUI: SSRF into internal services via unvalidated sub-resource requests in the Playwright web loader