https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T02:34:13.279804+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-375018 EUVD-2026-375018 2026-10-09T02:34:13.282000+00:00 EUVD-2026-375018 https://cve.radiocsirt.org/vuln/fkie_cve-2026-86119 fkie_cve-2026-86119 2026-10-09T02:34:13.282030+00:00

Webstudio through 0.296.0 contains an unauthenticated server-side request forgery vulnerability in the /cgi/image, /cgi/video, and /cgi/asset proxy routes when RESIZE_ORIGIN environment variable is unset. Attackers can supply arbitrary URLs to these endpoints to read cloud instance metadata, access internal services, and perform network reconnaissance on the instance infrastructure.

 https://cve.radiocsirt.org/vuln/ghsa-474j-x27j-w5wx GHSA-474j-x27j-w5wx 2026-10-09T02:34:13.282060+00:00

Webstudio through 0.296.0 contains an unauthenticated server-side request forgery vulnerability in the /cgi/image, /cgi/video, and /cgi/asset proxy routes when RESIZE_ORIGIN environment variable is unset. Attackers can supply arbitrary URLs to these endpoints to read cloud instance metadata, access internal services, and perform network reconnaissance on the instance infrastructure.