39811 matches found
DEBIAN-CVE-2026-12372
A Server-Side Request Forgery SSRF vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The nltk.pathsec.validatenetworkurl function, intended to prevent SSRF by rejecting internal network addresses, fails to reject IPs in the RFC 6598 shared address space 100.64.0.0/1...
CVE-2026-12372
A Server-Side Request Forgery SSRF vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The nltk.pathsec.validatenetworkurl function, intended to prevent SSRF by rejecting internal network addresses, fails to reject IPs in the RFC 6598 shared address space 100.64.0.0/1...
PYSEC-2026-3955
A Server-Side Request Forgery SSRF vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The nltk.pathsec.validatenetworkurl function, intended to prevent SSRF by rejecting internal network addresses, fails to reject IPs in the RFC 6598 shared address space 100.64.0.0/1...
PYSEC-2026-3955
A Server-Side Request Forgery SSRF vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The nltk.pathsec.validatenetworkurl function, intended to prevent SSRF by rejecting internal network addresses, fails to reject IPs in the RFC 6598 shared address space 100.64.0.0/1...
UBUNTU-CVE-2026-12372
A Server-Side Request Forgery SSRF vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The nltk.pathsec.validatenetworkurl function, intended to prevent SSRF by rejecting internal network addresses, fails to reject IPs in the RFC 6598 shared address space 100.64.0.0/1...
CVE-2026-12372
A flaw was found in NLTK. A Server-Side Request Forgery SSRF vulnerability allows an attacker to influence a URL passed to NLTK's network-loading helpers. This occurs because the nltk.pathsec.validatenetworkurl function fails to properly identify and reject IP addresses within the RFC 6598 shared...
CVE-2026-12372 Server-Side Request Forgery (SSRF) in nltk/nltk
A Server-Side Request Forgery SSRF vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The nltk.pathsec.validatenetworkurl function, intended to prevent SSRF by rejecting internal network addresses, fails to reject IPs in the RFC 6598 shared address space 100.64.0.0/1...
CVE-2026-12372 Server-Side Request Forgery (SSRF) in nltk/nltk
A Server-Side Request Forgery SSRF vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The nltk.pathsec.validatenetworkurl function, intended to prevent SSRF by rejecting internal network addresses, fails to reject IPs in the RFC 6598 shared address space 100.64.0.0/1...
CVE-2026-12372
A Server-Side Request Forgery (SSRF) exists in nltk/nltk versions 3.9.4 and the current develop branch. The function nltk.pathsec.validate_network_url() fails to reject IPs in RFC 6598 shared address space (100.64.0.0/10) because Python’s ipaddress classification does not mark such addresses as i...
CVE-2026-12372
A Server-Side Request Forgery SSRF vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The nltk.pathsec.validatenetworkurl function, intended to prevent SSRF by rejecting internal network addresses, fails to reject IPs in the RFC 6598 shared address space 100.64.0.0/1...
CVE-2026-12372
A Server-Side Request Forgery SSRF vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The "nltk.pathsec.validatenetworkurl" function, intended to prevent SSRF by rejecting internal network addresses, fails to reject IPs in the RFC 6598 shared address space...
CVE-2026-12372
A Server-Side Request Forgery SSRF vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch. The nltk.pathsec.validatenetworkurl function, intended to prevent SSRF by rejecting internal network addresses, fails to reject IPs in the RFC 6598 shared address space 100.64.0.0/1...
CVE-2026-19373
CVE-2026-19373 affects PhialsBasement KoboldCPP-MCP-Server 1.0.0. The issue is in the function makeRequest of src/index.ts within the BaseConfigSchema component, where manipulating the argument apiUrl can lead to server-side request forgery. The advisory notes that exploitation can be launched ag...
CVE-2026-65551
creationtimestamp| type| source ---|---|--- 2026-08-09 21:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msoizjv7sf2i 2026-08-10 17:16:08+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3msqm3cst432j...
fwupd:uswid_fuzzer: Crash in g_byte_array_append
Project: https://github.com/fwupd/fwupd.git Detailed Report: https://oss-fuzz.com/testcase?key=5430594256044032 Project: fwupd Fuzzing Engine: libFuzzer Fuzz Target: uswidfuzzer Job Type: libfuzzerasanfwupd Platform Id: linux Crash Type: UNKNOWN WRITE Crash Address: 0x7a619a501520 Crash State:...
EUVD-2026-54887
A vulnerability was determined in adenot mcp-google-search up to 0.3.1. Impacted is an unknown function of the file src/index.ts of the component readwebpage. Executing a manipulation of the argument url can lead to server-side request forgery. The attack is restricted to local execution. This...
CVE-2026-19337 adenot mcp-google-search read_webpage index.ts server-side request forgery
A vulnerability was determined in adenot mcp-google-search up to 0.3.1. Impacted is an unknown function of the file src/index.ts of the component readwebpage. Executing a manipulation of the argument url can lead to server-side request forgery. The attack is restricted to local execution. This...
mruby:mruby_fuzzer: Heap-buffer-overflow in mrb_vm_exec
Project: https://github.com/mruby/mruby.git Detailed Report: https://oss-fuzz.com/testcase?key=5893394698928128 Project: mruby Fuzzing Engine: afl Fuzz Target: mrubyfuzzer Job Type: aflasanmruby Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 8 Crash Address: 0x7afb1cae0480 Crash State:...
