https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T18:34:12.456880+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-41644 CVE-2026-41644 — monetr is vulnerable to server-side request forgery in Lunch Flow link creation and refresh 2026-10-07T18:34:12.474533+00:00

Affected: monetr

monetr is a budgeting application for recurring expenses. Prior to version 1.12.5, a server-side request forgery (SSRF) vulnerability in monetr's Lunch Flow integration allowed any authenticated user on a self-hosted instance to cause the monetr server to issue HTTP GET requests to arbitrary URLs supplied by the caller, with the response body from non-200 upstream responses reflected back in the API error message. This issue has been patched in version 1.12.5.