https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T06:14:41.516141+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-374834 EUVD-2026-374834 2026-10-06T06:14:41.577459+00:00 EUVD-2026-374834 https://cve.radiocsirt.org/vuln/fkie_cve-2026-59702 fkie_cve-2026-59702 2026-10-06T06:14:41.577506+00:00

repomix contains a server-side request forgery vulnerability in the POST /api/pack endpoint that allows unauthenticated attackers to make arbitrary outbound requests. The endpoint fails to properly validate http://, https://, and file:// URLs before passing them to git clone, enabling attackers to access private network addresses, GCP metadata services, or local filesystem paths.

 https://cve.radiocsirt.org/vuln/ghsa-5wj3-m77q-j278 GHSA-5wj3-m77q-j278 2026-10-06T06:14:41.577545+00:00

repomix contains a server-side request forgery vulnerability in the POST /api/pack endpoint that allows unauthenticated attackers to make arbitrary outbound requests. The endpoint fails to properly validate http://, https://, and file:// URLs before passing them to git clone, enabling attackers to access private network addresses, GCP metadata services, or local filesystem paths.