Vendor
The OWL DocumentProcessingToolkit is vulnerable to server-side request forgery in the extract_document_content tool, allowing attackers to perform prompt injection to exfiltrate internal resources.