Eric-d (VulDB User)

AstrBotDevs AstrBot T2I Feature base.py NetworkRenderStrategy.render cross site scripting

AstrBotDevs AstrBot session-listing Endpoint open_api.py OpenApiRoute.get_chat_sessions authorization

AstrBotDevs AstrBot API open_api.py OpenApiRoute.chat_send authentication spoofing

AstrBotDevs AstrBot Plugin Update plugin.py update_all_plugins server-side request forgery

AstrBotDevs AstrBot Filesystem Computer-Use Tool fs.py _normalize_rw_path link following

Sipeed PicoClaw Guarded Web Fetch Flow web.go WebFetchTool.Execute server-side request forgery

Sipeed PicoClaw MQTT Channel mqtt.go authorization

Sipeed PicoClaw Launcher access_control.go IPAllowlist access control

NousResearch hermes-agent Matrix Adapter matrix.py MatrixAdapter._markdown_to_html cross site scripting

BerriAI litellm Incomplete Fix CVE-2025-0628 internal_user_endpoints.py ui_view_users improper authorization