https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T04:17:20.738056+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-331777 EUVD-2026-331777 2026-10-19T04:17:20.740245+00:00 EUVD-2026-331777 https://cve.radiocsirt.org/vuln/fkie_cve-2026-10564 fkie_cve-2026-10564 2026-10-19T04:17:20.740277+00:00

IBM Langflow OSS 1.0.0 through 1.9.6 contains a Server-Side Request Forgery (SSRF). The legacy RSSReaderComponent in rss.py and SearXNG component in searxng.py make unvalidated HTTP requests to user-controlled URLs, bypassing SSRF protections introduced in version 1.9.3. An authenticated attacker can exploit this to access internal resources including cloud metadata services (AWS/Azure/GCP IMDS), potentially exfiltrating IAM credentials and enumerating internal networks. The vulnerability can also be triggered through prompt injection in agentic workflows due to tool_mode=True exposure.

 https://cve.radiocsirt.org/vuln/ghsa-rqjv-px3w-v3w6 GHSA-rqjv-px3w-v3w6 2026-10-19T04:17:20.740312+00:00

IBM Langflow OSS 1.0.0 through 1.9.6 contains a Server-Side Request Forgery (SSRF). The legacy RSSReaderComponent in rss.py and SearXNG component in searxng.py make unvalidated HTTP requests to user-controlled URLs, bypassing SSRF protections introduced in version 1.9.3. An authenticated attacker can exploit this to access internal resources including cloud metadata services (AWS/Azure/GCP IMDS), potentially exfiltrating IAM credentials and enumerating internal networks. The vulnerability can also be triggered through prompt injection in agentic workflows due to tool_mode=True exposure.