Hackerguopeng

**Name of the Vulnerable Software and Affected Versions** 2FastLabs agent-squad versions prior to 1.1.5 **Description** A remote issue exists within the Streaming Agent Response Workflow component, specifically in the `AgentSquad.routeRequest()` function located in the `agent-squad/typescript/src/orchestrator.ts` file. Manipulation of this function can lead to excessive resource consumption. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the `AgentSquad.routeRequest()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** zhayujie CowAgent versions prior to 2.1.4 **Description** A remote denial of service can be triggered through the manipulation of the `BrowserTool()` function within the `agent/tools/browser/browser tool.py` file of the Browser Tool component. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the `BrowserTool()` function.

**Name of the Vulnerable Software and Affected Versions** rowboatlabs rowboat versions prior to 0.9.2 **Description** A remote denial of service issue exists in the Composio Webhook Endpoint component. The problem occurs within the `request.text`/`req.json` functions located in the `apps/rowboat/app/api/composio/webhook/route.ts` file. **Recommendations** Update to version 0.9.2.

**Name of the Vulnerable Software and Affected Versions** simular-ai Agent-S versions prior to 0.3.3 **Description** A remote resource consumption issue exists within the OCR HTTP API component. The problem resides in the `ImageData()` function located in the `gui agents/s1/utils/ocr server.py` file. A remote attacker can trigger this by manipulating the `img bytes` argument. **Recommendations** Update simular-ai Agent-S to a version newer than 0.3.2. As a temporary mitigation, restrict access to the `ImageData()` function within the OCR HTTP API to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** hermes-agent version 0.18.0 **Description** A flaw in the Session Chat Interface component, specifically within the `gateway/platforms/api server.py` file, allows a remote attacker to cause a denial of service. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** hermes-agent versions prior to 0.18.3 **Description** A remote denial of service issue exists within the ACP Prompt Workflow component. The flaw is located in the `HermesACPAgent.prompt()` function within the `acp adapter/session.py` file, where improper manipulation can lead to a system crash or unavailability. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting the use of the `HermesACPAgent.prompt()` function to minimize the risk of exploitation.