https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 23:10:05 +0000 https://cve.radiocsirt.org/vuln/cnvd-2025-22725 cnvd-2025-22725 https://cve.radiocsirt.org/vuln/cnvd-2025-22725 https://cve.radiocsirt.org/vuln/euvd-2026-247570 EUVD-2026-247570 https://cve.radiocsirt.org/vuln/euvd-2026-247570 https://cve.radiocsirt.org/vuln/fkie_cve-2024-11031 <p>In version 3.83 of binary-husky/gpt_academic, a Server-Side Request Forgery (SSRF) vulnerability exists in the Markdown_Translate.get_files_from_everything() API. This vulnerability is exploited through the HotReload(Markdown翻译中) plugin function, which allows downloading arbitrary web hosts by only checking if the link starts with &#39;http&#39;. Attackers can exploit this vulnerability to abuse the victim GPT Academic&#39;s Gradio Web server&#39;s credentials to access unauthorized web resources.</p> <p>In version 3.83 of binary-husky/gpt_academic, a Server-Side Request Forgery (SSRF) vulnerability exists in the Markdown_Translate.get_files_from_everything() API. This vulnerability is exploited through the HotReload(Markdown翻译中) plugin function, which allows downloading arbitrary web hosts by only checking if the link starts with &#39;http&#39;. Attackers can exploit this vulnerability to abuse the victim GPT Academic&#39;s Gradio Web server&#39;s credentials to access unauthorized web resources.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-11031 https://cve.radiocsirt.org/vuln/ghsa-4452-rwq3-2x44 <p>In version 3.83 of binary-husky/gpt_academic, a Server-Side Request Forgery (SSRF) vulnerability exists in the Markdown_Translate.get_files_from_everything() API. This vulnerability is exploited through the HotReload(Markdown翻译中) plugin function, which allows downloading arbitrary web hosts by only checking if the link starts with &#39;http&#39;. Attackers can exploit this vulnerability to abuse the victim GPT Academic&#39;s Gradio Web server&#39;s credentials to access unauthorized web resources.</p> <p>In version 3.83 of binary-husky/gpt_academic, a Server-Side Request Forgery (SSRF) vulnerability exists in the Markdown_Translate.get_files_from_everything() API. This vulnerability is exploited through the HotReload(Markdown翻译中) plugin function, which allows downloading arbitrary web hosts by only checking if the link starts with &#39;http&#39;. Attackers can exploit this vulnerability to abuse the victim GPT Academic&#39;s Gradio Web server&#39;s credentials to access unauthorized web resources.</p> https://cve.radiocsirt.org/vuln/ghsa-4452-rwq3-2x44