https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 06:20:22 +0000 https://cve.radiocsirt.org/vuln/cve-2025-32013 <p><strong>Affected:</strong> lnbits</p> <p>LNbits is a Lightning wallet and accounts system. A Server-Side Request Forgery (SSRF) vulnerability has been discovered in LNbits&#39; LNURL authentication handling functionality. When processing LNURL authentication requests, the application accepts a callback URL parameter and makes an HTTP request to that URL using the httpx library with redirect following enabled. The application doesn&#39;t properly validate the callback URL, allowing attackers to specify internal network addresses and access internal resources.</p> <p><strong>Affected:</strong> lnbits</p> <p>LNbits is a Lightning wallet and accounts system. A Server-Side Request Forgery (SSRF) vulnerability has been discovered in LNbits&#39; LNURL authentication handling functionality. When processing LNURL authentication requests, the application accepts a callback URL parameter and makes an HTTP request to that URL using the httpx library with redirect following enabled. The application doesn&#39;t properly validate the callback URL, allowing attackers to specify internal network addresses and access internal resources.</p> https://cve.radiocsirt.org/vuln/cve-2025-32013 https://cve.radiocsirt.org/vuln/pysec-2025-16 <p><strong>Affected:</strong> PyPI: lnbits</p> <p>LNbits is a Lightning wallet and accounts system. A Server-Side Request Forgery (SSRF) vulnerability has been discovered in LNbits&#39; LNURL authentication handling functionality. When processing LNURL authentication requests, the application accepts a callback URL parameter and makes an HTTP request to that URL using the httpx library with redirect following enabled. The application doesn&#39;t properly validate the callback URL, allowing attackers to specify internal network addresses and access internal resources.</p> <p><strong>Affected:</strong> PyPI: lnbits</p> <p>LNbits is a Lightning wallet and accounts system. A Server-Side Request Forgery (SSRF) vulnerability has been discovered in LNbits&#39; LNURL authentication handling functionality. When processing LNURL authentication requests, the application accepts a callback URL parameter and makes an HTTP request to that URL using the httpx library with redirect following enabled. The application doesn&#39;t properly validate the callback URL, allowing attackers to specify internal network addresses and access internal resources.</p> https://cve.radiocsirt.org/vuln/pysec-2025-16