LangChain before 0.0.317 allows SSRF via document_loaders/recursive_url_loader.py
because crawling can proceed from an external server to an internal server.
{ "nvd_published_at": "2023-10-19T05:15:58Z", "cwe_ids": [ "CWE-918" ], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2023-10-19T16:35:44Z" }