Havel8964

An authorization bypass exists in the Social Login Flow component. A remote attacker can manipulate the `user response` variable within the `existingAccountCheck()` function at the '/api/v1/auth/existing-account-check' endpoint to bypass authentication mechanisms.

A flaw in the AWS Metadata Service component allows for remote server-side request forgery (SSRF), a condition where an attacker can induce the server to make requests to an unintended location. This occurs within the `build target url()` function located in the `ai-gateway/src/dispatcher/service.rs` file due to the manipulation of the `extracted path and query` argument.