https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T10:07:28.810687+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-349732 EUVD-2026-349732 2026-10-12T10:07:28.852302+00:00 EUVD-2026-349732 https://cve.radiocsirt.org/vuln/fkie_cve-2026-72591 fkie_cve-2026-72591 2026-10-12T10:07:28.852335+00:00

A server-side request forgery (SSRF) vulnerability in gabehf/Koito through v0.3.2 allows an authenticated user to make the server perform HTTP requests to arbitrary internal or external hosts by supplying a crafted image_url value in the PATCH /apis/web/v1/album/{id}/image endpoint.

 https://cve.radiocsirt.org/vuln/ghsa-hwrh-8qfp-c4p6 GHSA-hwrh-8qfp-c4p6 2026-10-12T10:07:28.852368+00:00

A server-side request forgery (SSRF) vulnerability in gabehf/Koito through v0.3.2 allows an authenticated user to make the server perform HTTP requests to arbitrary internal or external hosts by supplying a crafted image_url value in the PATCH /apis/web/v1/album/{id}/image endpoint.