Tsubasa Security Labs 合同会社

SSRF in Gemini Enterprise Agent Platform App Builder leaks service account access token

DoS via Large SAML Responses by Unauthorized User at POST /users/auth/saml/callback

Potential SSRF Vulnerability in httparty Leading to API Key Leakage

Possible SSRF and Credential Leakage via Absolute URL in axios Requests

Possible userinfo Leakage in URI.join / URI#merge

XSS via chat information tooltip in open-webui/open-webui

SSRF Exposes OpenAI API Keys in berriai/litellm