Threats tagged 'ghsa-r2jq-4h3x-rfj6'

BigSweetPotatoStudio HyperChat versions up to 2.0.0-alpha.63 contain a server-side request forgery (SSRF) vulnerability in the AI Proxy Middleware component. The issue arises from improper handling of the baseurl argument in the fetch function, allowing remote attackers to manipulate server requests. Public exploit code is available, but no official vendor response or patch has been issued yet.