https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 18:26:30 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-377838 EUVD-2026-377838 https://cve.radiocsirt.org/vuln/euvd-2026-377838 https://cve.radiocsirt.org/vuln/fkie_cve-2026-56739 <p>Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.43.0, Logto fetches administrator-controlled outbound destinations without validating the address used for the connection. Webhook delivery in packages/core/src/libraries/hook/utils.ts can reach special-use and cloud metadata addresses. Custom OAuth2 connectors can use an attacker-selected userInfoEndpoint and forward the OAuth access token in the Authorization header, while OIDC connectors can fetch an attacker-selected jwksUri. The affected operations require tenant administrative configuration access, but they cross the server&#39;s network boundary and can expose internal data or upstream provider credentials. This issue is fixed in version 1.43.0.</p> <p>Logto is the modern, open-source auth infrastructure for SaaS and AI apps. Prior to 1.43.0, Logto fetches administrator-controlled outbound destinations without validating the address used for the connection. Webhook delivery in packages/core/src/libraries/hook/utils.ts can reach special-use and cloud metadata addresses. Custom OAuth2 connectors can use an attacker-selected userInfoEndpoint and forward the OAuth access token in the Authorization header, while OIDC connectors can fetch an attacker-selected jwksUri. The affected operations require tenant administrative configuration access, but they cross the server&#39;s network boundary and can expose internal data or upstream provider credentials. This issue is fixed in version 1.43.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-56739