| शीर्षक | ag-ui-protocol ag-ui 0.3.0 CWE-942 |
|---|
| विवरण | The app factory wires CORSMiddleware with allow_origins=["*"], allow_methods=["*"], allow_headers=["*"] (credentials are disabled for the wildcard, which is correct). The agent endpoint itself has no authentication. The docstring states the wildcard default is intended for local development, but the same factory is the documented production path (the README's Bedrock AgentCore quick start uses create_strands_app). |
|---|
| स्रोत | ⚠️ https://github.com/ag-ui-protocol/ag-ui/issues/2433 |
|---|
| उपयोगकर्ता | colorfullbz (UID 86308) |
|---|
| सबमिशन | 17/08/2026 03:39 PM (1 महीना पहले) |
|---|
| संयम | 16/09/2026 07:36 AM (30 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 405445 [ag-ui-protocol ag-ui 0.3.0 CORSMiddleware utils.py create_strands_app अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|