https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T06:28:02.312519+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-339364 EUVD-2026-339364 2026-10-13T06:28:02.369962+00:00 EUVD-2026-339364 https://cve.radiocsirt.org/vuln/fkie_cve-2026-64626 fkie_cve-2026-64626 2026-10-13T06:28:02.370009+00:00

AVideo versions from commit 0dbadbca through latest master contain a server-side request forgery vulnerability in the encoder download-by-URL flow due to an unpinned retry fallback that bypasses DNS pinning validation. An authenticated attacker can supply a downloadURL that redirects to an internal address, causing the unpinned retry to follow the redirect and reach internal targets for blind SSRF attacks.

 https://cve.radiocsirt.org/vuln/ghsa-rqr2-9jm2-2q9j GHSA-rqr2-9jm2-2q9j 2026-10-13T06:28:02.370042+00:00

AVideo versions from commit 0dbadbca through latest master contain a server-side request forgery vulnerability in the encoder download-by-URL flow due to an unpinned retry fallback that bypasses DNS pinning validation. An authenticated attacker can supply a downloadURL that redirects to an internal address, causing the unpinned retry to follow the redirect and reach internal targets for blind SSRF attacks.