Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 21:16:52 +0000 EUVD-2026-323361 https://cve.radiocsirt.org/vuln/euvd-2026-323361 EUVD-2026-323361 https://cve.radiocsirt.org/vuln/euvd-2026-323361 fkie_cve-2026-49328 https://cve.radiocsirt.org/vuln/fkie_cve-2026-49328 <p>Server-Side Request Forgery (SSRF) in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet before 2.0.2-incubating allows attackers to cause outbound network requests to internal or otherwise restricted resources via a user-supplied image URL. Users are recommended to upgrade to version 2.0.2-incubating, which fixes this issue.</p> <p>Server-Side Request Forgery (SSRF) in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet before 2.0.2-incubating allows attackers to cause outbound network requests to internal or otherwise restricted resources via a user-supplied image URL. Users are recommended to upgrade to version 2.0.2-incubating, which fixes this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-49328 GHSA-vqc2-c9jh-3jjv — Apache Fesod is vulnerable to Server-Side Request Forgery through its UrlImageConverter component https://cve.radiocsirt.org/vuln/ghsa-vqc2-c9jh-3jjv <p><strong>Affected:</strong> Maven: org.apache.fesod:fesod-sheet</p> <p>Server-Side Request Forgery (SSRF) in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet before 2.0.2-incubating allows attackers to cause outbound network requests to internal or otherwise restricted resources via a user-supplied image URL. Users are recommended to upgrade to version 2.0.2-incubating, which fixes this issue.</p> <p><strong>Affected:</strong> Maven: org.apache.fesod:fesod-sheet</p> <p>Server-Side Request Forgery (SSRF) in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet before 2.0.2-incubating allows attackers to cause outbound network requests to internal or otherwise restricted resources via a user-supplied image URL. Users are recommended to upgrade to version 2.0.2-incubating, which fixes this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-vqc2-c9jh-3jjv