GHSA-RFR2-MQ9M-X2QX datamodel-code-generator vulnerable to SSRF via --url: no host/IP validation, follows redirects

Summary datamodel-code-generator's built-in HTTP fetcher http.getbody issues an httpx.GET against any URL passed to --url or reached via a redirect chain with no allow-list, no deny-list, no IP/host validation, and followredirects=True. Loopback addresses, RFC1918 ranges, link-local 169.254.169.2...

CVE-2026-54691

CVE-2026-54691 affects datamodel-code-generator prior to 0.61.0; the http.get_body function in src/datamodel_code_generator/http.py accepts --url targets and redirect chains without host/IP validation, enabling server-side request forgery to loopback, private, link-local, metadata, and other netw...

CVE-2026-54691 datamodel-code-generator vulnerable to SSRF via --url: no host/IP validation, follows redirects

datamodel-code-generator generates Python data models from schema definitions. From 0.9.1 until 0.61.0, src/datamodelcodegenerator/http.py http.getbody accepts --url targets and redirect chain targets without host/IP validation, allowing server-side request forgery against loopback, private,...

CVE-2026-50737

creationtimestamp| type| source ---|---|--- 2026-07-28 20:18:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrqa6orpmn2k...

CVE-2026-51267

creationtimestamp| type| source ---|---|--- 2026-07-28 20:16:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrqa35kalo2r 2026-07-29 12:02:45+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrruxvmoo42o...

GHSA-VCHH-R53J-8MPW Fission: HTTPTrigger admission omits RelativeURL / Prefix validation; kubectl apply bypasses CLI checks

HTTPTriggerSpec.Validate validated Methods, FunctionReference, Host, IngressConfig, and CorsConfig, but silently skipped RelativeURL and Prefix. Those two fields were validated at the CLI level only pkg/fission-cli/cmd/httptrigger/create.go:83. The post-CRD-modernization webhook for HTTPTrigger w...

EUVD-2026-36073

Fission: HTTPTrigger admission omits RelativeURL / Prefix validation; kubectl apply bypasses CLI checks...

CVE-2026-16313

creationtimestamp| type| source ---|---|--- 2026-07-28 19:48:38+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mrq6jzrtmr2o...

CVE-2026-51259

creationtimestamp| type| source ---|---|--- 2026-07-28 19:14:05+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrq4mb5ppf2k...

CVE-2026-51260

creationtimestamp| type| source ---|---|--- 2026-07-28 19:14:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrq4m7sgsu2y...

CVE-2026-51252

creationtimestamp| type| source ---|---|--- 2026-07-28 19:12:06+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mrq4ipgtta2u 2026-07-29 00:02:49+00:00| seen| https://bsky.app/profile/bootintel.bsky.social/post/3mrqmqkcihu2i...

CVE-2026-4932

creationtimestamp| type| source ---|---|--- 2026-07-28 19:06:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrq466ewo62g...

CVE-2026-48392

creationtimestamp| type| source ---|---|--- 2026-07-28 19:03:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mrq3ys5trx2i...

CVE-2026-47768 nebula-mesh: Newly-minted operator API key exposed in redirect URL (Referer, history, proxy logs)

nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, newly-minted operator API key exposed in redirect URL Referer, history, proxy logs. This issue has been patched in version 0.3.2...

CVE-2026-47768 nebula-mesh: Newly-minted operator API key exposed in redirect URL (Referer, history, proxy logs)

nebula-mesh is a self-hosted control plane for Slack Nebula mesh virtual private network. Prior to version 0.3.2, newly-minted operator API key exposed in redirect URL Referer, history, proxy logs. This issue has been patched in version 0.3.2...

CVE-2026-59250

creationtimestamp| type| source ---|---|--- 2026-07-28 17:22:20+00:00| seen| https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-in-erlang/otp-2...

CVE-2026-67184

TinyWeb through 0.0.8 contains a null pointer dereference vulnerability that allows unauthenticated remote attackers to crash worker processes by sending a malformed HTTP request line with an invalid version string. The HttpParser::execute function fails to allocate the Url object when version...

CVE-2026-66748

creationtimestamp| type| source ---|---|--- 2026-07-28 17:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mrpv6bv23f2w 2026-07-29 01:00:03+00:00| seen| https://t.me/GithubRedTeam/95604 2026-07-29 12:32:03+00:00| seen|...

Poweradmin has Host Header Injection in OIDC redirect_uri, SAML ACS/SLO URL, and Logout Redirect Construction.

Summary Poweradmin v4.3.2 uses the attacker-controlled HTTPHOST request header as the authoritative source for building callback URLs in its OIDC, SAML, and logout authentication flows without any validation. An unauthenticated attacker can poison the redirecturi sent to the Identity Provider,...

CVE-2026-67185

TinyWeb through 0.0.8 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by submitting ../ sequences in the URL path, which are concatenated directly to the configured web root in HttpBuilder::buildResponse without normalization, dot-segment...