npm/@karakeep/sdk: high
Karakeep SDK has SSRF via metascraper-logo-favicon that bypasses validateUrl protections
Action: Upgrade @karakeep/sdk to 0.32.0 or later.
npm i @karakeep/sdk@0.32.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.32.0 | - |
Fixed versions
| 0.32.0 |
Sources
- osv: GHSA-7rx4-c5vx-g8w3
- https://github.com/karakeep-app/karakeep/security/advisories/GHSA-7rx4-c5vx-g8w3
- https://github.com/karakeep-app/karakeep/pull/2763
- https://github.com/karakeep-app/karakeep/commit/3dc321e7d49aa3a1a2493637fb2ee21616fe5fd9
- https://github.com/karakeep-app/karakeep
- https://github.com/karakeep-app/karakeep/releases/tag/v0.32.0
published · modified · JSON