https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T08:49:28.749493+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-374999 EUVD-2026-374999 2026-10-07T08:49:28.797868+00:00 EUVD-2026-374999 https://cve.radiocsirt.org/vuln/fkie_cve-2026-85179 fkie_cve-2026-85179 2026-10-07T08:49:28.797910+00:00

Label Studio through 1.23.0 fails to validate webhook URLs, allowing authenticated users to dispatch requests to internal services including RFC 1918 addresses and cloud metadata endpoints. Attackers can create webhooks targeting private networks and exfiltrate annotation data by enabling payload transmission in outbound requests.

 https://cve.radiocsirt.org/vuln/ghsa-93hf-p7mp-qw5g GHSA-93hf-p7mp-qw5g 2026-10-07T08:49:28.797947+00:00

Label Studio through 1.23.0 fails to validate webhook URLs, allowing authenticated users to dispatch requests to internal services including RFC 1918 addresses and cloud metadata endpoints. Attackers can create webhooks targeting private networks and exfiltrate annotation data by enabling payload transmission in outbound requests.