SSRF (Server-Side Request Forgery) vulnerability exists in the gradio-app/gradio repository, allowing attackers to scan and identify open ports within an internal network. By manipulating the 'file' parameter

SSRF vulnerability exists in the gradio-app/gradio due to insufficient validation of user-supplied URLs in the `/proxy` route. Attackers can exploit this vulnerability by manipulating the `self.replica_urls

attacker to force the service to retrieve data from an arbitrary URL, essentially providing SSRF and potentially injecting content into downstream tasks

LangChain before 0.0.317 allows SSRF via document_loaders/recursive_url_loader.py because crawling can proceed from an external server to an internal server

MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints

PraisonAI is a multi-agent teams system. From version 4.5.126

OpenClaw is an agent gateway distributed as the npm package

MCP Atlassian: HTTP upload tools accept arbitrary server-local file

MCP Atlassian: Unauthenticated arbitrary local file read via upload_attachment

MCP Atlassian is a Model Context Protocol (MCP) server for

Chainlist has SSRF via MCP SSE and streamable-http transports that allows unauthenticated internal network access

PraisonAI: Webhook SSRF via DNS fail-open in `JobSubmitRequest.validate_webhook_url()` — bypass

praisonaiagents has an SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io

praisonaiagents web_crawl vulnerable to SSRF via redirect-following

PraisonAI is a multi-agent teams system. In versions 1.5.128

Open WebUI: DNS Rebinding SSRF Bypass

Open WebUI: Any authenticated user can reach internal services and

Open WebUI: SSRF into internal services via unvalidated sub-resource requests in the Playwright web loader

Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses

Flyto2 Core is an execution kernel for automation and AI