https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T21:16:59.862229+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-323361 EUVD-2026-323361 2026-10-15T21:16:59.864397+00:00 EUVD-2026-323361 https://cve.radiocsirt.org/vuln/fkie_cve-2026-49328 fkie_cve-2026-49328 2026-10-15T21:16:59.864426+00:00

Server-Side Request Forgery (SSRF) in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet before 2.0.2-incubating allows attackers to cause outbound network requests to internal or otherwise restricted resources via a user-supplied image URL. Users are recommended to upgrade to version 2.0.2-incubating, which fixes this issue.

 https://cve.radiocsirt.org/vuln/ghsa-vqc2-c9jh-3jjv GHSA-vqc2-c9jh-3jjv — Apache Fesod is vulnerable to Server-Side Request Forgery through its UrlImageConverter component 2026-10-15T21:16:59.864456+00:00

Affected: Maven: org.apache.fesod:fesod-sheet

Server-Side Request Forgery (SSRF) in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet before 2.0.2-incubating allows attackers to cause outbound network requests to internal or otherwise restricted resources via a user-supplied image URL. Users are recommended to upgrade to version 2.0.2-incubating, which fixes this issue.