CVE-2026-90769 Open Notebook before 1.11.0 Server-Side Request Forgery via link-source

Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. Attackers can supply arbitrary URLs to read cloud metadata, internal network services, and localhost-bound services...

CVE-2026-90769 Open Notebook before 1.11.0 Server-Side Request Forgery via link-source

Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. Attackers can supply arbitrary URLs to read cloud metadata, internal network services, and localhost-bound services...

CVE-2026-90769

Open Notebook before 1.11.0 contains a Server-Side Request Forgery (SSRF) vulnerability in the POST /api/sources endpoint. The application fails to validate the URL parameter, allowing any authenticated user to supply arbitrary URLs that the server will fetch directly. This enables attackers to r...

CVE-2025-492026

Security Advisory: CVE-2025-492026 Summary A vulnerability has been identified in Copilot AI that causes an unintended hyperlink to be included in the "link source" section whenever Copilot retrieves a web query. This issue resulted in users clicking on links to https://www.collectingflags.com ev...

CVE-2025-492025

CVE-2025-492025 Security Advisory: CVE-2025-492025 Summary A vulnerability has been identified in Copilot AI that causes an unintended hyperlink to be included in the "link source" section whenever Copilot retrieves a web query. This issue resulted in users clicking on links to...

GHSA-8XCM-R25X-G524

creationtimestamp| type| source ---|---|--- 2026-07-29 15:21:08+00:00| seen| https://bsky.app/profile/nodeland.dev/post/3mrsa2mvibp2t 2026-08-04 14:32:21+00:00| seen| https://gist.github.com/alon710/51c65a255f770cf34523cbf52ef9595a...

CVE-2023-41101

creationtimestamp| type| source ---|---|--- 2026-07-26 02:02:18+00:00| seen| https://t.me/EchelonEyes/2245 2026-07-27 00:00:54+00:00| seen| https://t.me/EchelonEyes/2245 2026-07-28 00:00:32+00:00| exploited| https://t.me/EchelonEyes/2245...

CVE-2023-54357

creationtimestamp| type| source ---|---|--- 2026-06-19 19:44:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moo44kbjyj2m...

CVE-2026-35069

creationtimestamp| type| source ---|---|--- 2026-06-17 18:16:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3moiwb5s5iv2s...

GHSA-RJXQ-QQHF-8HWH

creationtimestamp| type| source ---|---|--- 2026-06-17 18:11:20+00:00| seen| https://gist.github.com/alon710/419f4d41351693c7c60ff49637269f97 2026-06-18 20:02:03+00:00| seen| https://gist.github.com/alon710/4e321e5dcf74a8eaf0f99d54a40035e9...

CVE-2026-53408

creationtimestamp| type| source ---|---|--- 2026-06-09 15:28:39+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3mnuj5z7rmz2z 2026-06-16 20:07:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3moglyfwgl52x 2026-07-05 03:49:57+00:00| seen|...

CVE-2020-37006

creationtimestamp| type| source ---|---|--- 2026-01-29 18:35:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mdlgj4a3og2n...

CVE-2025-68622

creationtimestamp| type| source ---|---|--- 2026-01-12 17:46:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mcalv53xno2y...

CVE-2025-69234

creationtimestamp| type| source ---|---|--- 2025-12-30 02:28:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb6cigngmr2r...

CVE-2022-48961

creationtimestamp| type| source ---|---|--- 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

CVE-2025-58207

creationtimestamp| type| source ---|---|--- 2025-11-06 18:26:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m4y6ts6odg2s...

CVE-2025-10966

creationtimestamp| type| source ---|---|--- 2025-11-05 06:16:22+00:00| seen| https://seclists.org/oss-sec/2025/q4/137 2025-11-05 22:12:33+00:00| seen| https://bsky.app/profile/securitycipher.bsky.social/post/3m4w2zfmwdt2w 2025-11-07 05:53:31+00:00| seen|...

CVE-2025-53678

creationtimestamp| type| source ---|---|--- 2025-07-09 18:21:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltkgmlmgw62b 2025-09-09 20:51:41+00:00| seen| MISP/e0a0042d-e47b-4875-b781-99d4428af3c2...

GHSA-P3X9-6H7P-CGFC

creationtimestamp| type| source ---|---|--- 2025-03-14 18:23:02+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lkea5pjd6i23 2025-03-30 06:32:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9547...

CVE-2020-15227

creationtimestamp| type| source ---|---|--- 2020-10-14 19:14:14+00:00| published-proof-of-concept| https://t.me/HackerOne/2787 2024-04-11 19:32:15+00:00| published-proof-of-concept| https://t.me/CNArsenal/2295 2024-04-12 02:30:07+00:00| published-proof-of-concept|...