Homepage
About Snyk

fastagency@0.0.0a3 vulnerabilities

The fastest way to bring multi-agent workflows to production

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the fastagency package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Server-side Request Forgery (SSRF)

fastagency is a The fastest way to bring multi-agent workflows to production

Affected versions of this package are vulnerable to Server-side Request Forgery (SSRF) via the OAuth2PasswordBearer class's get_token method, where the token_url is constructed from unvalidated OpenAPI schema parameters. Attackers can exploit this by supplying malicious OpenAPI schemas with crafted token_url values, causing the application to send requests to unintended endpoints.

How to fix Server-side Request Forgery (SSRF)?

Upgrade fastagency to version 0.2.4 or higher.

[,0.2.4)
Go back to all versions of this package