https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 22:21:07 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-163228 EUVD-2026-163228 https://cve.radiocsirt.org/vuln/euvd-2026-163228 https://cve.radiocsirt.org/vuln/fkie_cve-2024-31979 <p>Server-Side Request Forgery (SSRF) vulnerability in Apache StreamPipes during installation process of pipeline elements. Previously, StreamPipes allowed users to configure custom endpoints from which to install additional pipeline elements. These endpoints were not properly validated, allowing an attacker to get StreamPipes to send an HTTP GET request to an arbitrary address. This issue affects Apache StreamPipes: through 0.93.0.</p> <p>Users are recommended to upgrade to version 0.95.0, which fixes the issue.</p> <p>Server-Side Request Forgery (SSRF) vulnerability in Apache StreamPipes during installation process of pipeline elements. Previously, StreamPipes allowed users to configure custom endpoints from which to install additional pipeline elements. These endpoints were not properly validated, allowing an attacker to get StreamPipes to send an HTTP GET request to an arbitrary address. This issue affects Apache StreamPipes: through 0.93.0.</p> <p>Users are recommended to upgrade to version 0.95.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-31979 https://cve.radiocsirt.org/vuln/ghsa-9gr7-gh74-qg9x <p><strong>Affected:</strong> Maven: org.apache.streampipes:streampipes-parent, PyPI: streampipes</p> <p>Server-Side Request Forgery (SSRF) vulnerability in Apache StreamPipes during installation process of pipeline elements. Previously, StreamPipes allowed users to configure custom endpoints from which to install additional pipeline elements. These endpoints were not properly validated, allowing an attacker to get StreamPipes to send an HTTP GET request to an arbitrary address.</p> <p>This issue affects Apache StreamPipes: through 0.93.0.</p> <p>Users are recommended to upgrade to version 0.95.0, which fixes the issue.</p> <p><strong>Affected:</strong> Maven: org.apache.streampipes:streampipes-parent, PyPI: streampipes</p> <p>Server-Side Request Forgery (SSRF) vulnerability in Apache StreamPipes during installation process of pipeline elements. Previously, StreamPipes allowed users to configure custom endpoints from which to install additional pipeline elements. These endpoints were not properly validated, allowing an attacker to get StreamPipes to send an HTTP GET request to an arbitrary address.</p> <p>This issue affects Apache StreamPipes: through 0.93.0.</p> <p>Users are recommended to upgrade to version 0.95.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-9gr7-gh74-qg9x https://cve.radiocsirt.org/vuln/gsd-2024-31979 gsd-2024-31979 https://cve.radiocsirt.org/vuln/gsd-2024-31979 https://cve.radiocsirt.org/vuln/pysec-2024-174 <p><strong>Affected:</strong> PyPI: streampipes</p> <p>Server-Side Request Forgery (SSRF) vulnerability in Apache StreamPipes during installation process of pipeline elements. Previously, StreamPipes allowed users to configure custom endpoints from which to install additional pipeline elements. These endpoints were not properly validated, allowing an attacker to get StreamPipes to send an HTTP GET request to an arbitrary address. This issue affects Apache StreamPipes: through 0.93.0.</p> <p>Users are recommended to upgrade to version 0.95.0, which fixes the issue.</p> <p><strong>Affected:</strong> PyPI: streampipes</p> <p>Server-Side Request Forgery (SSRF) vulnerability in Apache StreamPipes during installation process of pipeline elements. Previously, StreamPipes allowed users to configure custom endpoints from which to install additional pipeline elements. These endpoints were not properly validated, allowing an attacker to get StreamPipes to send an HTTP GET request to an arbitrary address. This issue affects Apache StreamPipes: through 0.93.0.</p> <p>Users are recommended to upgrade to version 0.95.0, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/pysec-2024-174