WhisperX tag archive

#Internal Network

This page collects WhisperX intelligence signals tagged #Internal Network. It is designed for humans, search engines, and AI agents: each item links to a canonical source-backed record with sector, source, timestamp, credibility, and exportable structured data.

Latest Signals (2)

The Lab · 2026-03-29 06:26:54 · GitHub Issues

1. Security: SSRF via User-Controlled Storage Config in POST /spaces/{space_id}/test-connection

A critical Server-Side Request Forgery (SSRF) vulnerability exists in the `test_connection_endpoint` of the application's backend. The endpoint accepts a `SpaceConnectionRequest` payload and passes the user-controlled `storage_config` dictionary directly to the `ugoite_core.test_storage_connection()` function. This con...

The Lab · 2026-04-17 05:22:35 · GitHub Issues

2. Critical SSRF Vulnerability in Popular HTTP Helper Exposes Internal Networks

A widely used HTTP client helper library contains a critical security flaw, exposing applications to Server-Side Request Forgery (SSRF) attacks. The `Http` helper's `send()` method passes user-supplied URLs directly to the underlying `fetch()` function without any validation, creating a direct pipeline for attackers to...