https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T22:24:08.856658+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-336546 EUVD-2026-336546 2026-10-06T22:24:08.910744+00:00 EUVD-2026-336546 https://cve.radiocsirt.org/vuln/fkie_cve-2026-22662 fkie_cve-2026-22662 2026-10-06T22:24:08.910781+00:00

prompts.chat prior to commit 1464475 contains a blind server-side request forgery vulnerability in the Wiro media generator that allows authenticated users to perform server-side fetches of user-controlled inputImageUrl parameters. Attackers can exploit this vulnerability by sending POST requests to the /api/media-generate endpoint to probe internal networks, access internal services, and exfiltrate data through the upstream Wiro service without receiving direct response bodies.

 https://cve.radiocsirt.org/vuln/ghsa-gv6r-fmg6-c7v4 GHSA-gv6r-fmg6-c7v4 2026-10-06T22:24:08.910816+00:00

prompts.chat prior to commit 1464475 contains a blind server-side request forgery vulnerability in the Wiro media generator that allows authenticated users to perform server-side fetches of user-controlled inputImageUrl parameters. Attackers can exploit this vulnerability by sending POST requests to the /api/media-generate endpoint to probe internal networks, access internal services, and exfiltrate data through the upstream Wiro service without receiving direct response bodies.