Assafelovic vulnerabilities
We track 3 vulnerabilities in Assafelovic products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on April 6, 2026.
Latest Assafelovic vulnerabilities
- 7.3 High severity
gpt-researcher: Server-Side Request Forgery
A vulnerability was determined in assafelovic gpt-researcher up to 3.4.3. Affected is an unknown function of the component ws Endpoint. Executing a manipulation of the argument source_urls can lead to server-side request forgery. It is possible to launch the a
- 7.3 High severity
gpt-researcher: Improper Authentication
A vulnerability was found in assafelovic gpt-researcher up to 3.4.3. This impacts an unknown function of the component HTTP REST API Endpoint. Performing a manipulation results in missing authentication. It is possible to initiate the attack remotely. The expl
- 7.3 High severity
gpt-researcher: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability has been found in assafelovic gpt-researcher up to 3.4.3. This affects the function extract_command_data of the file backend/server/server_utils.py of the component ws Endpoint. Such manipulation of the argument args leads to code injection. Th