CVE-2026-54689

mcp-searxng is a Model Context Protocol server that gives AI assistants web search and URL-reading capabilities through SearXNG. Prior to 1.2.0, the weburlread URL policy in src/url-reader.ts can be bypassed while MCPHTTPHARDEN is enabled and MCPHTTPALLOWPRIVATEURLS is not enabled because redirec...

CVE-2026-53716 Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, getFileFromGZ in internal/wasm/httpfetcher.go calls io.ReadAll on a gzip.Reader without limiting decompressed output when a tenant-controlled...

CVE-2026-53716

Envoy Gateway (open-source application gateway managing Envoy Proxy) has an unbounded gzip decompression vulnerability in getFileFromGZ within internal/wasm/httpfetcher.go. The function calls io.ReadAll on a gzip.Reader without limiting the decompressed output size. When a tenant-controlled Envoy...

CVE-2026-53716 Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit

Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. Prior to 1.7.4 and 1.8.1, getFileFromGZ in internal/wasm/httpfetcher.go calls io.ReadAll on a gzip.Reader without limiting decompressed output when a tenant-controlled...

MAL-2026-16056 Malicious code in tailwind-aspect-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d63fe1e50dc7d704732a5e92e95f320fcc3fac45c5a0a223ed278f316c2bb14 The package's main module src/index.js performs an https.get to http://23.27.245.100/index.js over plain HTTP, writes the response to./inout.js in th...

Malicious code in tailwind-aspect-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4d63fe1e50dc7d704732a5e92e95f320fcc3fac45c5a0a223ed278f316c2bb14 The package's main module src/index.js performs an https.get to http://23.27.245.100/index.js over plain HTTP, writes the response to./inout.js in th...

Malicious code in tailwindcss-aspectratio-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b995eb02f80f9037beda9f8a864f55109e054925175289df0c1b29ed8011bc3 src/index.js, referenced by the package main and executed on require, performs an HTTP GET to http://tailwindlan.online, writes the response body to ...

MAL-2026-16049 Malicious code in tailwindcss-aspectratio-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9b995eb02f80f9037beda9f8a864f55109e054925175289df0c1b29ed8011bc3 src/index.js, referenced by the package main and executed on require, performs an HTTP GET to http://tailwindlan.online, writes the response body to ...

MAL-2026-15905 Malicious code in tailwindcss-3d-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6afb2de10208993a1e7511cb81a6f11806561b389673da3fa24d22598178b744 The package's main entry point fetches a JavaScript file from http://23.27.245.100:3000/index.js over plain HTTP at require time, writes the response...

Malicious code in tailwindcss-3d-styles (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6afb2de10208993a1e7511cb81a6f11806561b389673da3fa24d22598178b744 The package's main entry point fetches a JavaScript file from http://23.27.245.100:3000/index.js over plain HTTP at require time, writes the response...

PT-2026-85578

Nightingale n9e, as of commit 8362cbe main branch, confirmed 2026-08-27, contains a server-side request forgery vulnerability in the isPublicIP function in aiagent/tools/http.go, the SSRF guard for the http fetch AI-agent tool. The function only unwraps standard IPv4-mapped ::ffff:a.b.c.d IPv6...

Malicious code in bnpl-blocks-atom-bnpl-image-card (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abfb9fc4e628aff9ca7ab9df6b7a2b65c27eb1a094e4d64ff002a98f35eb58e1 On require, index.js loads bridge.js which selects a platform-specific asset path, fetches a binary over HTTPS from runtime-assembled Cloudflare...

CVE-2026-34966

Gitea prior to 1.27.0 contains a server-side request forgery vulnerability that allows authenticated attackers to bypass SSRF protections by exploiting HTTP fetch operations in migration and OAuth avatar code paths that use Go's default http.Get without a custom DialContext. Attackers can supply...

Malicious code in devplatform-spa-plugin-s3-router (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d2d2addbad66de5b68e55eb91db20968268ed1f7a951835a35aef1159e4af41 On require of devplatform-spa-plugin-s3-router, index.js loads helpers.js which runs a bootstrap routine at module load. The code assembles Cloudflar...

Malicious code in bnpl-blocks-atom-bnpl-reviews-counter (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 28f2136092f1d01017b4a4d573e4a22de7c4fc7d44b07d8e3a1f24ce57be6c65 On require of this package, index.js loads platform.js which runs at import time. It reconstructs a list of destination hosts by string-splitting...

Server-side Request Forgery (SSRF)

Overview nltk is a Natural Language Toolkit NLTK is a Python package for natural language processing. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF through the urlopen process in nltk.pathsec. An attacker can reach loopback or internal HTTP services by...

WebSocket Reverse Tunnel

Open a WebSocket from the hooked browser and proxy HTTP fetch commands through it from kittysploit import import json import threading import time import queue try: import asyncio from websockets.server import serve as wsserve WEBSOCKETSAVAILABLE = True except ImportError: WEBSOCKETSAVAILABLE =...

swagger-typescript-api vulnerable to Server-Side Request Forgery via spec `$ref`

Summary swagger-typescript-api walks every $ref value in the input OpenAPI spec and, for any $ref whose target is an https:// URL, issues an HTTP GET to that URL during generation warmUpRemoteSchemasCache. The only URL filter is a regex that matches ^https?:// — there is no private-IP allowlist, ...

PT-2026-60897

Name of the Vulnerable Software and Affected Versions meta-ads-mcp version 1.0.113 Description An unauthenticated remote attacker can perform a Server-Side Request Forgery SSRF when the server is deployed using the streamable-http transport. The upload ad image tool accepts an image url parameter...

Envoy Gateway: Wasm HTTP fetch decompresses gzip without output-size limit

Vulnerability report without repro case. Repro case may be added later after harness is complete. Preconditions 4: - Tenant can create EnvoyExtensionPolicy baseline - Attacker hosts a gzip-bomb at a reachable URL - sha256 unset optional field; check is post-decompression anyway - No operator...