VYPR

req_llm

by Agentjido

CVEs (1)

  • CVE-2026-107685CriOct 23, 2026
    risk 0.52cvss —epss —

    Improper Certificate Validation vulnerability in the WebSocket streaming client in agentjido req_llm allows an on-path attacker to read and modify OpenAI WebSocket sessions, including the authorization bearer token, via a TLS certificate the client does not trust.…