Skip to content
OpenAdvisories

Vendor

camel-ai

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 7.5

    OWL DocumentProcessingToolkit Server-Side Request Forgery via URL Fetching

    OWL's DocumentProcessingToolkit contains a server-side request forgery vulnerability in the extract_document_content tool that fetches caller-supplied URLs with no scheme, host, or IP filtering. Attackers can inject malicious URLs through prompt injection to …