https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T11:00:57.143762+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-370464 EUVD-2026-370464 2026-10-02T11:00:57.145910+00:00 EUVD-2026-370464 https://cve.radiocsirt.org/vuln/fkie_cve-2026-92813 fkie_cve-2026-92813 2026-10-02T11:00:57.145941+00:00

Metabase through 0.63.18 fails to properly validate the unspecified address 0.0.0.0 in custom GeoJSON URLs, allowing unauthenticated attackers to reach loopback services. Attackers can save a malicious GeoJSON entry with 0.0.0.0 and trigger requests that return loopback service responses to unauthenticated callers.

 https://cve.radiocsirt.org/vuln/ghsa-vhcq-xc7j-xfj8 GHSA-vhcq-xc7j-xfj8 2026-10-02T11:00:57.145973+00:00

Metabase through 0.63.18 fails to properly validate the unspecified address 0.0.0.0 in custom GeoJSON URLs, allowing unauthenticated attackers to reach loopback services. Attackers can save a malicious GeoJSON entry with 0.0.0.0 and trigger requests that return loopback service responses to unauthenticated callers.