local-deep-research vulnerabilities (PyPI)

4 vulnerabilities.

• local-deep-research PyPI Local Deep Research: SSRF bypass in `safe_get` CVE-2026-46526 Fix available 5.0 MediumMay 28, 2026
• local-deep-research PyPI Local Deep Research: HTML Injection via Unescaped User Input in PDF Export (`pdf_service.py:_markdown_to_html`) CVE-2026-43979 Fix available 5.0 MediumMay 11, 2026
• local-deep-research PyPI Local Deep Research is Vulnerable to Server-Side Request Forgery (SSRF) in Download Service CVE-2025-67743 Fix available 6.3 MediumDecember 23, 2025
• local-deep-research PyPI Local Deep Research's API keys are stored in plain text CVE-2025-57806 Fix available 6.9 MediumSeptember 2, 2025