📦 Typebot

This SSRF vulnerability in Typebot allows authenticated users to make arbitrary HTTP requests from the server, including accessing AWS Instance Metadata Service. By bypassing IMDSv2 protections, attac...

This vulnerability in Typebot allows attackers to steal stored credentials (OpenAI keys, Google Sheets tokens, SMTP passwords) from any user who previews a malicious chatbot. The flaw occurs because t...