PyPI/local-deep-research CVE-2026-46526: medium 5, EPSS 0.30%

local-deep-research has an SSRF bypass in `safe_get`

Action: Upgrade local-deep-research to 1.6.10 or later.

pip install local-deep-research==1.6.10

Affected

Fixed versions

Sources

• osv: GHSA-g23j-2vwm-5c25
• https://github.com/LearningCircuit/local-deep-research/security/advisories/GHSA-g23j-2vwm-5c25
• https://nvd.nist.gov/vuln/detail/CVE-2026-46526
• https://github.com/LearningCircuit/local-deep-research/pull/3873
• https://github.com/LearningCircuit/local-deep-research/pull/3882
• https://github.com/LearningCircuit/local-deep-research/pull/3889
• https://github.com/LearningCircuit/local-deep-research/pull/3932
• https://github.com/LearningCircuit/local-deep-research
• https://github.com/LearningCircuit/local-deep-research/releases/tag/v1.6.10

CVE-2026-46526 · published 2026-05-28T19:18:34Z · modified 2026-07-13T16:43:03.154558573Z · JSON