Skip to content
OpenAdvisories

Package · Hex

req_llm

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.1
    CVE-2026-107685

    WebSocket sessions do not verify TLS certificates, exposing API keys and OAuth tokens to on-path attackers

    Improper Certificate Validation vulnerability in the WebSocket streaming client in agentjido req_llm allows an on-path attacker to read and modify OpenAI WebSocket sessions, including the authorization bearer token, via a TLS certificate the client does not t…

    agentjido req_llm req_llm Hex