https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T18:31:17.293975+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-49876 CVE-2026-49876 — Apache Gravitino: Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and c… 2026-10-16T18:31:17.322948+00:00

Affected: Apache Software Foundation Apache Gravitino

Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs. A vulnerability in Apache Gravitino.

This issue affects Apache Gravitino: from 1.0.0 through 1.2.1.

Users are recommended to upgrade to version 1.3.0, which fixes the issue.