https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 15:57:49 +0000 https://db.gcve.eu/vuln/cve-2026-85675 <p><strong>Affected:</strong> camel-ai owl</p> <p>OWL&#39;s DocumentProcessingToolkit contains a server-side request forgery vulnerability in the extract_document_content tool that fetches caller-supplied URLs with no scheme, host, or IP filtering. Attackers can inject malicious URLs through prompt injection to make the server fetch internal resources, with responses returned to the agent context.</p> <p><strong>Affected:</strong> camel-ai owl</p> <p>OWL&#39;s DocumentProcessingToolkit contains a server-side request forgery vulnerability in the extract_document_content tool that fetches caller-supplied URLs with no scheme, host, or IP filtering. Attackers can inject malicious URLs through prompt injection to make the server fetch internal resources, with responses returned to the agent context.</p> https://db.gcve.eu/vuln/cve-2026-85675