https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T05:57:40.913595+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-375094 EUVD-2026-375094 2026-10-06T05:57:40.959466+00:00 EUVD-2026-375094 https://cve.radiocsirt.org/vuln/fkie_cve-2026-91750 fkie_cve-2026-91750 2026-10-06T05:57:40.959507+00:00

WeKnora before 0.7.0 fails to re-validate HTTP redirect targets in the POST /api/v1/knowledge-bases/:id/knowledge/url endpoint when downloading documents from user-supplied URLs. Authenticated attackers can bypass initial SSRF validation by supplying a public URL that redirects to internal network addresses, allowing access to internal services and cloud metadata.

 https://cve.radiocsirt.org/vuln/ghsa-hvpp-w3x6-m653 GHSA-hvpp-w3x6-m653 2026-10-06T05:57:40.959542+00:00

WeKnora before 0.7.0 fails to re-validate HTTP redirect targets in the POST /api/v1/knowledge-bases/:id/knowledge/url endpoint when downloading documents from user-supplied URLs. Authenticated attackers can bypass initial SSRF validation by supplying a public URL that redirects to internal network addresses, allowing access to internal services and cloud metadata.