Skip to content
OpenAdvisories

Vendor

shepherd-agents

1 known vulnerabilities.

Products

Shepherd 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.1
    CVE-2026-108741

    Shepherd through 0.3.1 SSRF via DNS Rebinding in Citation Checker

    Shepherd (shepherd-ai) through 0.3.1 contains a server-side request forgery guard bypass in the citation-checker extra because the public_url guard validates a resolved address but fetch re-resolves the hostname at connect time. Attackers who plant a crafted …

    shepherd-agents Shepherd