https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 12:58:46 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-374943 EUVD-2026-374943 https://cve.radiocsirt.org/vuln/euvd-2026-374943 https://cve.radiocsirt.org/vuln/fkie_cve-2026-82262 <p>Logto through 1.42.0 contains a server-side request forgery vulnerability in the POST /api/hooks/:id/test endpoint that accepts arbitrary URLs without host validation. Tenant administrators with Management API tokens can make the server issue HTTP POST requests to internal URLs and retrieve response bodies from services on the private network.</p> <p>Logto through 1.42.0 contains a server-side request forgery vulnerability in the POST /api/hooks/:id/test endpoint that accepts arbitrary URLs without host validation. Tenant administrators with Management API tokens can make the server issue HTTP POST requests to internal URLs and retrieve response bodies from services on the private network.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-82262 https://cve.radiocsirt.org/vuln/ghsa-2442-5g74-2q7v <p>Logto through 1.42.0 contains a server-side request forgery vulnerability in the POST /api/hooks/:id/test endpoint that accepts arbitrary URLs without host validation. Tenant administrators with Management API tokens can make the server issue HTTP POST requests to internal URLs and retrieve response bodies from services on the private network.</p> <p>Logto through 1.42.0 contains a server-side request forgery vulnerability in the POST /api/hooks/:id/test endpoint that accepts arbitrary URLs without host validation. Tenant administrators with Management API tokens can make the server issue HTTP POST requests to internal URLs and retrieve response bodies from services on the private network.</p> https://cve.radiocsirt.org/vuln/ghsa-2442-5g74-2q7v