https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T20:14:45.697947+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-250219 EUVD-2026-250219 2026-10-12T20:14:45.699978+00:00 EUVD-2026-250219 https://cve.radiocsirt.org/vuln/fkie_cve-2024-39954 fkie_cve-2024-39954 2026-10-12T20:14:45.700006+00:00

CWE-918 Server-Side Request Forgery (SSRF) in eventmesh-runtime module in WebhookUtil.java on windows\linux\mac os e.g. allows the attacker can abuse functionality on the server to read or update internal resources. Users are recommended to upgrade to version 1.12.0 or use the master branch , which fixes this issue.

 https://cve.radiocsirt.org/vuln/ghsa-hf86-8x8v-h7vc GHSA-hf86-8x8v-h7vc — Apache EventMesh Vulnerable to Server-Side Request Forgery in WebhookUtil.java 2026-10-12T20:14:45.700035+00:00

Affected: Maven: org.apache.eventmesh:eventmesh-runtime

Server-Side Request Forgery (SSRF) in eventmesh-runtime module in WebhookUtil.java on windows\linux\mac os e.g. allows the attacker can abuse functionality on the server to read or update internal resources. Users are recommended to upgrade to version 1.12.0 or use the master branch, which fixes this issue.