Skip to content
OpenAdvisories

Product · PsychQuant

livedocs

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.7

    LiveDocs: fetch_docs/introspect fetch client-supplied URLs with no host allowlist and follow redirects

    LiveDocs is a primary-source-first documentation for AI agents. Prior to version 0.7.0, fetch_docs and introspect (kinds openapi/graphql, and resolve_source's docs_url) pass a client-supplied URL straight to URLSession with no scheme or host allowlist, and re…