Skip to content
OpenAdvisories

Vendor

guy-hartstein

1 known vulnerabilities.

Products

company-research-agent 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-108850

    Company Research Agent through 2.2.0 SSRF via /generate-pdf ReportLab Markup

    Company Research Agent through 2.2.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to trigger outbound requests by injecting unescaped ReportLab paragraph markup into the /generate-pdf endpoint. Attackers can embed…

    guy-hartstein company-research-agent