https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T16:55:00.530013+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-324291 EUVD-2026-324291 2026-10-07T16:55:00.581542+00:00 EUVD-2026-324291 https://cve.radiocsirt.org/vuln/fkie_cve-2026-10662 fkie_cve-2026-10662 2026-10-07T16:55:00.581580+00:00

A vulnerability was found in ahujasid blender-mcp up to 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b. The affected element is the function requests.get of the file src/blender_mcp/server.py of the component ZIP File Handler. The manipulation of the argument zip_file_url results in server-side request forgery. The attack can be executed remotely. The exploit has been made public and could be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The patch is identified as 5b37be25242e73dc4cf1328974d30458b9e5d67e. It is advisable to implement a patch to correct this issue.

 https://cve.radiocsirt.org/vuln/ghsa-5hr7-6m56-f3rg GHSA-5hr7-6m56-f3rg 2026-10-07T16:55:00.581617+00:00

A vulnerability was found in ahujasid blender-mcp up to 7636d13bded82eca58eb93c3f4cd8708dfdfbe8b. The affected element is the function requests.get of the file src/blender_mcp/server.py of the component ZIP File Handler. The manipulation of the argument zip_file_url results in server-side request forgery. The attack can be executed remotely. The exploit has been made public and could be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The patch is identified as 5b37be25242e73dc4cf1328974d30458b9e5d67e. It is advisable to implement a patch to correct this issue.