buildbot-badges (>=1.7.0, <=1.8.2), no-cloud (0.0.8) potentially affected by CVE-2026-107378 via cairosvg (1.0.22)

cairosvg PYPI version 1.0.22 is affected by a known vulnerability. The following packages have a transitive dependency on cairosvg and may be impacted: - buildbot-badges =1.7.0, =1.8.2 - no-cloud 0.0.8 Source cves: CVE-2026-107378 Source advisory: OSV:PYSEC-2026-4204...

PYSEC-2026-4291 Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifiers

Summary When an application using Pydantic AI opts a URL into local network access — either a FileUrl with forcedownload='allow-local', or webfetchtoolallowlocalurls=True — the cloud-metadata blocklist could be bypassed by appending an IPv6 zone identifier to a metadata address for example...

PYSEC-2026-4282 Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifiers

Summary When an application using Pydantic AI opts a URL into local network access — either a FileUrl with forcedownload='allow-local', or webfetchtoolallowlocalurls=True — the cloud-metadata blocklist could be bypassed by appending an IPv6 zone identifier to a metadata address for example...

Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifiers

SummaryWhen an application using Pydantic AI opts a URL into local network access — either a FileUrl with forcedownload='allow-local', or webfetchtoolallowlocalurls=True — the cloud-metadata blocklist could be bypassed by appending an IPv6 zone identifier to a metadata address for example...

Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifiers

SummaryWhen an application using Pydantic AI opts a URL into local network access — either a FileUrl with forcedownload='allow-local', or webfetchtoolallowlocalurls=True — the cloud-metadata blocklist could be bypassed by appending an IPv6 zone identifier to a metadata address for example...

Ivanti Cloud Services Appliance - Path Traversal

Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality. id: CVE-2024-8963 info: name: Ivanti Cloud Services Appliance - Path Traversal author: johnk3r severity: critical description: | Path Traversal in the Ivanti CSA befo...

RHEL 8 / 9 : Red Hat Service Interconnect 2.2.3 Release (rpms) (Moderate) (RHSA-2026:82316)

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:82316 advisory. Red Hat Service Interconnect 2.2 creates a service network, linking TCP and HTTP services across the hybrid cloud. A service network enables...

CVE-2026-111323: Server-Side Request Forgery (SSRF)

RedAmon through 7.0.1 contains an unauthenticated server-side request forgery vulnerability in the agent POST /tradecraft/verify endpoint because validateurl checks only the initial hostname. Attackers can submit a public URL that redirects or DNS-rebinds to internal addresses like cloud metadata...

CVE-2026-0312

Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem...

CVE-2026-0311

A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services...

CVE-2026-0311

A Server-Side Request Forgery (SSRF) vulnerability exists in Palo Alto Networks Checkov by Prisma® Cloud . This flaw allows a local unauthenticated user to trigger unauthorized network requests from the host to internal services. As a workaround , users should avoid running Checkov over untrusted...

EUVD-2026-101676

A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services...

CVE-2026-0311 Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability

A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests from host to internal services...

CVE-2026-0312

Palo Alto Networks Checkov by Prisma Cloud is impacted by path traversal vulnerabilities (CWE-22). These flaws allow an unauthenticated local user to write files to arbitrary locations on the scanning filesystem. As a workaround , users should avoid running Checkov over untrusted content and expl...

CVE-2026-0312 Checkov by Prisma Cloud: Path Traversal Vulnerabilities

Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem...

EUVD-2026-101675

Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem...

CVE-2026-55385

InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf's PDFConfigurationRequest.php validates the owner-controlled gotenberghost setting only as a syntactically valid URL...

CVE-2026-55385 InvoiceShelf: SSRF via unvalidated Gotenberg PDF renderer host in PDF configuration

InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf's PDFConfigurationRequest.php validates the owner-controlled gotenberghost setting only as a syntactically valid URL...

CVE-2026-55385 InvoiceShelf: SSRF via unvalidated Gotenberg PDF renderer host in PDF configuration

InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates. Prior to version 2.4.0, InvoiceShelf's PDFConfigurationRequest.php validates the owner-controlled gotenberghost setting only as a syntactically valid URL...

CVE-2026-55385

The InvoiceShelf web and mobile application is vulnerable to Server-Side Request Forgery (SSRF) in versions prior to 2.4.0 . The root cause lies in PDFConfigurationRequest.php, which only performs syntactic validation on the owner-controlled gotenberg_host setting. Consequently, GotenbergPDFDrive...