Product
Label Studio versions prior to 1.23.2 and label-studio-sdk prior to 2.1.2 are vulnerable to SSRF, allowing authenticated users to access internal resources and capture sensitive API tokens.