CVEs and responsible disclosures.
Triggering an exception after establishing a streamable HTTP session causes uncaught ClosedResourceError, crashing the server.
Malformed JSON-RPC requests cause unhandled validation exceptions, resulting in 500 errors and service unavailability.
Prompt injection bypasses restrictions on module imports, jailbreak protections, and allowlists to achieve arbitrary Python code execution.
The llm_math chain enables remote code execution through the Python interpreter via prompt injection. Co-discovered with others.
The APIChain.from_llm_and_api_docs chain enables server-side request forgery through prompt injection.
The SQLDatabaseChain enables SQL injection attacks through prompt injection.
OAuth2/OIDC flow permitted localhost as authorized redirect URI, enabling account takeover via social engineering.