ai-websearch-benchmark

Certifi removes GLOBALTRUST root certificate

aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence

LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages

AIOHTTP has CRLF injection through multipart part content type header construction

urllib3 streaming API improperly handles highly compressed data

LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning

Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)

AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS

Marshmallow has DoS in Schema.load(many)

Langchain SQL Injection vulnerability

urllib3 does not control redirects in browsers and Node.js

aiohttp: HTTP/1 Pipelined Requests Queue Without Limit

aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections

pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size

AIOHTTP vulnerable to brute-force leak of internal static file path components

Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction

langchain-core allows unauthorized users to read arbitrary files from the host file system

AnyIO process-pool workers can block indefinitely on undrained stderr

AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection/security bypass

aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines

Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

AIOHTTP's unicode processing of header values could cause parsing discrepancies

AIOHTTP vulnerable to denial of service through large payloads

AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb

LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates

AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing

urllib3: HTTPS proxy TLS configuration may be ignored or overridden

LangChain has incomplete f-string validation in prompt templates

AIOHTTP is vulnerable to HTTP Request/Response Smuggling through incorrect parsing of chunked trailer sections

AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect

Requests vulnerable to .netrc credentials leak via malicious URLs

Requests `Session` object does not verify requests after making first request with verify=False

aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect

AIOHTTP accepts duplicate Host headers

LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs

AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)

LangSmith SDK TracingMiddleware: Arbitrary server-side file read

AIOHTTP Vulnerable to Cookie Parser Warning Storm

LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading

LangChain Text Splitters: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass

LangGraph SDK custom auth silently ignores actions= on resource decorators

aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup

LangGraph checkpoint loading has unsafe msgpack deserialization

tqdm CLI arguments injection attack

AIOHTTP vulnerable to DoS through chunked messages

Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function

urllib3: Chunked Deflate streaming can enter an infinite loop

urllib3 allows an unbounded number of links in the decompression chain