https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 03:54:27 +0000 https://cve.radiocsirt.org/vuln/cve-2026-45366 <p><strong>Affected:</strong> universal-tool-calling-protocol typescript-utcp</p> <p>typescript-utcp is a typescript implementation of UTCP. Prior to 1.1.2, the @utcp/http package is vulnerable to a blind Server-Side Request Forgery (SSRF) caused by a trust-boundary inconsistency between manual discovery and tool invocation. registerManual() validates the discovery URL against an HTTPS / loopback allowlist, but callTool() reuses the resolved toolCallTemplate.url directly without revalidating, and the OpenApiConverter blindly trusts whatever servers[0].url an attacker-hosted spec declares. An attacker who hosts a malicious OpenAPI spec on a legitimate HTTPS endpoint can declare e.g. servers: [{ url: &#34;http://127.0.0.1:9090&#34; }] or servers: [{ url: &#34;http://169.254.169.254&#34; }]; the converter then produces tools whose URL points at internal services on the agent host. This vulnerability is fixed in 1.1.2.</p> <p><strong>Affected:</strong> universal-tool-calling-protocol typescript-utcp</p> <p>typescript-utcp is a typescript implementation of UTCP. Prior to 1.1.2, the @utcp/http package is vulnerable to a blind Server-Side Request Forgery (SSRF) caused by a trust-boundary inconsistency between manual discovery and tool invocation. registerManual() validates the discovery URL against an HTTPS / loopback allowlist, but callTool() reuses the resolved toolCallTemplate.url directly without revalidating, and the OpenApiConverter blindly trusts whatever servers[0].url an attacker-hosted spec declares. An attacker who hosts a malicious OpenAPI spec on a legitimate HTTPS endpoint can declare e.g. servers: [{ url: &#34;http://127.0.0.1:9090&#34; }] or servers: [{ url: &#34;http://169.254.169.254&#34; }]; the converter then produces tools whose URL points at internal services on the agent host. This vulnerability is fixed in 1.1.2.</p> https://cve.radiocsirt.org/vuln/cve-2026-45366