utcp-http
PyPI · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| utcp-http has an OAuth2 `tokenUrl` Trust Boundary Bypass in OpenAPI Conversion | utcp-http | PyPI | High | Fix reported | |
| utcp-http SSRF: HTTP tool invocation follows redirects without re-validating the target | utcp-http | PyPI | High | Fix reported | |
| utcp-http vulnerable to SSRF via attacker-controlled OpenAPI servers[0].url in HTTP communication protocol | utcp-http | PyPI | Medium | Fix reported |