TI-2026-58787 CVE-2026-85675 · GHSA-9c7r-jxm8-hgg2
OWL DocumentProcessingToolkit Server-Side Request Forgery via URL Fetching
Priority MEDIUM 44
OWL's DocumentProcessingToolkit contains a server-side request forgery vulnerability in the extract_document_content tool that fetches caller-supplied URLs with no scheme, host, or IP filtering.