https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T03:04:59.390105+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-335890 EUVD-2026-335890 2026-10-16T03:04:59.447529+00:00 EUVD-2026-335890 https://cve.radiocsirt.org/vuln/fkie_cve-2026-49876 fkie_cve-2026-49876 2026-10-16T03:04:59.447567+00:00

Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs. A vulnerability in Apache Gravitino.

This issue affects Apache Gravitino: from 1.0.0 through 1.2.1.

Users are recommended to upgrade to version 1.3.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-q28r-579j-9qxq GHSA-q28r-579j-9qxq 2026-10-16T03:04:59.447614+00:00

Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs. A vulnerability in Apache Gravitino.

This issue affects Apache Gravitino: from 1.0.0 through 1.2.1.

Users are recommended to upgrade to version 1.3.0, which fixes the issue.

 https://cve.radiocsirt.org/vuln/pysec-2026-3442 PYSEC-2026-3442 2026-10-16T03:04:59.447646+00:00

Affected: PyPI: apache-gravitino

Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs. A vulnerability in Apache Gravitino.

This issue affects Apache Gravitino: from 1.0.0 through 1.2.1.

Users are recommended to upgrade to version 1.3.0, which fixes the issue.