35441 matches found
CVE-2026-56261 Crawl4AI - Server-Side Request Forgery via Webhook URLs
Crawl4AI before 0.8.7 contains a server-side request forgery SSRF vulnerability in the Docker API server's /crawl/job and /llm/job endpoints, which accept webhook URLs without destination validation. An attacker can supply webhook URLs pointing to private or internal IP ranges, Docker networks, o...
CVE-2026-56261
Crawl4AI before 0.8.7 contains a server-side request forgery SSRF vulnerability in the Docker API server's /crawl/job and /llm/job endpoints, which accept webhook URLs without destination validation. An attacker can supply webhook URLs pointing to private or internal IP ranges, Docker networks, o...
CVE-2026-56261 Crawl4AI - Server-Side Request Forgery via Webhook URLs
Crawl4AI before 0.8.7 contains a server-side request forgery SSRF vulnerability in the Docker API server's /crawl/job and /llm/job endpoints, which accept webhook URLs without destination validation. An attacker can supply webhook URLs pointing to private or internal IP ranges, Docker networks, o...
CVE-2026-15378
A flaw was found in the guardrails-detectors component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery SSRF by submitting a specially crafted XML Schema Definition XSD string. This can lead to unauthorized access to sensitive information, including...
EUVD-2026-42858
A flaw was found in the guardrails-detectors component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery SSRF by submitting a specially crafted XML Schema Definition XSD string. This can lead to unauthorized access to sensitive information, including...
CVE-2026-15378 Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)
A flaw was found in the guardrails-detectors component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery SSRF by submitting a specially crafted XML Schema Definition XSD string. This can lead to unauthorized access to sensitive information, including...
CVE-2026-15378
The CVE-2026-15378 entry concerns the guardrails-detectors component where a flaw allows remote attackers to perform a blind Server-Side Request Forgery (SSRF) by submitting a crafted XML Schema Definition string. This can lead to unauthorized access to sensitive information (e.g., credentials fr...
CVE-2026-15378
A flaw was found in the guardrails-detectors component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery SSRF by submitting a specially crafted XML Schema Definition XSD string. This can lead to unauthorized access to sensitive information, including...
GHSA-Q96W-JFJR-XWW5 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-qemu, linux-azure, linux-qemu-melange...
GHSA-7M9Q-85QJ-RC4G vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-qemu, linux-azure, linux-qemu-melange...
GHSA-5G46-HMW3-W78X vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-qemu, linux-azure, linux-qemu-melange...
CVE-2026-53269 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-qemu, linux-azure, linux-qemu-melange...
GHSA-VQ3G-6QWH-5WJ2 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-qemu, linux-azure, linux-qemu-melange...
GHSA-5QWX-4Q7J-HWM2 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-qemu, linux-azure, linux-qemu-melange...
CVE-2026-53256 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-qemu, linux-azure, linux-qemu-melange...
CVE-2026-53258 vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-qemu, linux-azure, linux-qemu-melange...
GHSA-HQ32-RPPJ-R4RV vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-qemu, linux-azure, linux-qemu-melange...
GHSA-GJ4P-2QJV-WCHV vulnerabilities
Vulnerabilities for packages: linux-gcp, linux-qemu, linux-azure, linux-qemu-melange...