https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T23:32:12.722850+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-354452 EUVD-2026-354452 2026-10-05T23:32:12.770486+00:00 EUVD-2026-354452 https://cve.radiocsirt.org/vuln/fkie_cve-2026-73058 fkie_cve-2026-73058 2026-10-05T23:32:12.770525+00:00

stoatchat versions before 0.15.0 fail to block the IPv6 unspecified address (::) in the SSRF blocklist, allowing unauthenticated attackers to bypass protections via the /proxy and /embed endpoints. Attackers can craft requests using IPv6 literal syntax to access services on the loopback interface and retrieve sensitive internal content.

 https://cve.radiocsirt.org/vuln/ghsa-6x44-jq26-vpv6 GHSA-6x44-jq26-vpv6 2026-10-05T23:32:12.770559+00:00

stoatchat versions before 0.15.0 fail to block the IPv6 unspecified address (::) in the SSRF blocklist, allowing unauthenticated attackers to bypass protections via the /proxy and /embed endpoints. Attackers can craft requests using IPv6 literal syntax to access services on the loopback interface and retrieve sensitive internal content.