Server-side Request Forgery (SSRF)

Overview adloop is a The AI command center for Google Ads, GA4, and tracking code. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the validateurls function. An attacker can induce the server to make arbitrary HTTP requests by supplying crafted input to th...

Malicious code in chai-as-precision (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f8b5d1218fae5d91755d8f9ca8ed37983e7d589c6fd88012d3ddb29a84a2cc56 Package is published as chai-as-precision but its shipped code mimics pino exports middleware.pino, ships pino.js/proto.js/redaction.js, a name/purpo...

CVE-2026-49876

creationtimestamp| type| source ---|---|--- 2026-07-13 04:10:16+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mqit4ca7od2c 2026-07-13 18:58:22+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkeqdsbpl2i 2026-07-14 03:54:38+00:00| seen|...

CVE-2026-15525

A vulnerability was detected in kLOsk adloop up to 0.9.0. This vulnerability affects the function validateurls of the file src/adloop/ads/write.py. Performing a manipulation of the argument finalurl results in server-side request forgery. The attack may be initiated remotely. The exploit is now...

CVE-2026-15525

CVE-2026-15525 affects the kLOsk adloop package up to version 0.9.0. The vulnerability is in the function _validate_urls in src/adloop/ads/write.py, where manipulating the argument final_url can trigger a server-side request forgery (SSRF). The issue can be exploited remotely and the exploit is p...

CVE-2026-15551

creationtimestamp| type| source ---|---|--- 2026-07-13 01:30:39+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqik6uqc3l2e 2026-07-13 03:41:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqirjanmxp2z...

MAL-2026-10217 Malicious code in dotnet-runtime-base (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c10c75766303f8c3bf261487e341e537f103116026309006ab71d977aacdd235 The package's postinstall lifecycle script package.json line 7: "postinstall": "node install.js" runs install.js, which on Windows writes a PowerShel...

CVE-2026-15514

creationtimestamp| type| source ---|---|--- 2026-07-13 00:30:19+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqigsyplnr2y 2026-07-13 04:08:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqiszrfnrl2w...

CVE-2026-15507

creationtimestamp| type| source ---|---|--- 2026-07-13 00:01:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqifa5gev425 2026-07-13 20:46:54+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkksfgwji2z...

PT-2026-59028

A bug in the login redirect route in Apache Airflow allowed authenticated users to craft URLs that bypassed the is safe url check, enabling redirection from a trusted Airflow domain to an attacker-controlled origin. Users are advised to upgrade to apache-airflow 3.2.2 or later. As a...

PT-2026-59572

Summary FileTools.download file in praisonaiagents validates the destination path but performs no validation on the url parameter, passing it directly to httpx.stream with follow redirects=True. An attacker who controls the URL can reach any host accessible from the server including cloud metadat...

PT-2026-59127

Impact The URLInputHandler class in docling graph/core/input/handlers.py makes HTTP requests to user-supplied URLs without validating whether the target resolves to a private, loopback, or link-local IP address. The URLValidator only checks for a valid scheme and non-empty netloc, performing no...

PT-2026-59082

Summary Bugsink’s webhook URL validation in versions 2.1.2 and earlier could be partially bypassed because of a mismatch in URL parsing. In some malformed URLs, Python’s standard URL parser urllib and the HTTP client stack requests / urllib3 do not agree on which host is actually being targeted...

PT-2026-57851

Cross-site scripting vulnerability in phoenixframework phoenix live view allows an attacker to bypass URL scheme validation and execute JavaScript in a victim's browser session. The Phoenix.LiveView.Utils.valid destination!/2 and Phoenix.LiveView.Utils.valid live navigation destination!/2 functio...

PT-2026-59582

Summary The URL checking logic in PraisonAI has a logical flaw that could be bypassed by attackers, leading to SSRF attacks. Details The current PraisonAI project uses validate url to validate the input URL. The main logic is to perform security checks on the host portion of the URL extracted by...

CVE-2026-58228: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in phoenixframework phoenixliveview allows an attacker to bypass URL scheme validation and execute JavaScript in a victim's browser session. The Phoenix.LiveView.Utils.validdestination!/2 and Phoenix.LiveView.Utils.validlivenavigationdestination!/2 functions in...

PT-2026-59265

Summary The URL checking logic in local-deep-research has a logical flaw that could be bypassed by attackers, leading to SSRF attacks. Details The current project uses validate url to validate the input URL. The main logic is to perform security checks on the host portion of the URL extracted by...

PT-2026-59385

Summary The SafePlaywrightURLLoader implements a validate url function to prevent SSRF attacks by checking the IP address of the user-provided URL. However, this validation is performed only on the initial URL. Since Playwright automatically follows HTTP redirects 301/302 by default, an attacker...

PT-2026-59016

A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function process audio block of the file src/agentscope/agent/ agent base.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the...

PT-2026-59141

While testing the OAuth Proxy implementation, it was noticed that the server does not properly respect the resource parameter submitted by the client in the authorization and token request. Instead of issuing the token explicitly for this MCP server, the token is issued for the base url passed to...