Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

local-deep-research

3 known vulnerabilities (3 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 3 medium
Registry
PyPI

Advisories 3

  • CVE-2026-43979Medium 5.0

    Local Deep Research: HTML Injection via Unescaped User Input in PDF Export (`pdf_service.py:_markdown_to_html`)

    Affected: fixed in 1.6.0.

  • CVE-2026-46526Medium 5.0

    Local Deep Research: SSRF bypass in `safe_get`

    Affected: fixed in 1.6.10.

  • CVE-2025-67743Medium 6.3

    Local Deep Research is Vulnerable to Server-Side Request Forgery (SSRF) in Download Service

    Affected: from 1.3.0, fixed in 1.3.9.