Fetching from the wire…
01
02
03
04
05
06
07
08
Tools2026-08-28 · source-backed
gemini-cli's August 27 nightly prevents SSRF in MCP OAuth metadata discovery and authentication (PR #29081), google/adk-python v1.39.1 added a Host header check on its CLI server plus artifact reference scoping, and pydantic-ai v2.35.3 scopes safe_download cookies to their original hostnames (GitHub). Discovery endpoints an agent fetches on your behalf are a repeatable SSRF class, and all three are in code paths a self-hosted agent runs by default.
Each link below shares sources, entities, or timing with this story.
Shared entities / Same source domain / Shared topic / Earlier coverage
Both cover August, CLI, GitHub, MCP OAuth; reported by the same outlet (github.com); overlapping topics (august, discovery, endpoint).
Shared entities / Same source domain / Shared topic / Earlier coverage / Tension
Both cover August, CLIs, GitHub; reported by the same outlet (github.com); overlapping topics (agent, august, code).
Shared entities / Same source domain / Shared topic / Earlier coverage
Both cover August, CLIs, GitHub; reported by the same outlet (github.com); overlapping topics (agent, artifact, august, clis).
Both cover CLI, CLIs, GitHub; reported by the same outlet (github.com); overlapping topics (august, clis, code).
Both cover August, GitHub, SSRF; reported by the same outlet (github.com); overlapping topics (agent, august, class).
Both cover August, Discovery, GitHub; reported by the same outlet (github.com); overlapping topics (agent, august, code).
Both cover August, GitHub; reported by the same outlet (github.com); overlapping topics (added, agent, artifact, august, code).
Both cover CLI, CLIs, GitHub; reported by the same outlet (github.com); overlapping topics (agent, clis).