CVE-2026-19375

A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0. This vulnerability affects the function fetcharticle of the file newsscrapermcp/server.py. The manipulation of the argument url results in server-side request forgery. The attack may be performed from remote. The exploit is now...

CVE-2026-19375

CVE-2026-19375 affects dmitriiweb article-scraper-mcp 1.0.0. The vulnerability is in the function fetch_article (file: news_scraper_mcp/server.py); manipulating the argument url results in server-side request forgery . Attack can be performed remotely and the exploit is public. The reports note t...

CVE-2026-19375 dmitriiweb article-scraper-mcp server.py fetch_article server-side request forgery

A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0. This vulnerability affects the function fetcharticle of the file newsscrapermcp/server.py. The manipulation of the argument url results in server-side request forgery. The attack may be performed from remote. The exploit is now...

CVE-2026-19375 dmitriiweb article-scraper-mcp server.py fetch_article server-side request forgery

A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0. This vulnerability affects the function fetcharticle of the file newsscrapermcp/server.py. The manipulation of the argument url results in server-side request forgery. The attack may be performed from remote. The exploit is now...

PT-2026-69320

Name of the Vulnerable Software and Affected Versions dmitriiweb article-scraper-mcp version 1.0.0 Description A remote attacker can perform server-side request forgery SSRF, a technique that allows a server to be coerced into making requests to an unintended location, by manipulating the url...

gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2026-71870 via pypdf (4.3.0)

pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2026-71870 Source advisory: OSV:GHSA-FP3F-MC75-235C...

genai-4-dps-helper (0.2.31), news-scraper-pdf (1.1.6) +5 more potentially affected by CVE-2026-71870 via pypdf (5.3.0)

pypdf PYPI version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - genai-4-dps-helper 0.2.31 - news-scraper-pdf 1.1.6 - polytext =0.1.0, =0.1.0, =0.1.10 - python-pdf-toolkit 0.1.1 - synforge 0.1.0 - textspitter 0.3.7r...

gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2026-71852 via pypdf (4.3.0)

pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2026-71852 Source advisory: OSV:GHSA-FWG2-594C-JP42...

vk-url-scraper (>=0.2.1, <=0.3.5) potentially affected by CVE-2026-55404 via yt-dlp (2022.5.18)

yt-dlp PYPI version 2022.5.18 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - vk-url-scraper =0.2.1, =0.3.5 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

basketcase (3.0.2), gridplayer (0.4.3) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2022.7.18)

yt-dlp PYPI version 2022.7.18 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase 3.0.2 - gridplayer 0.4.3 - vk-url-scraper =0.3.8, =0.3.10 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

scdlbot (0.15.0), vk-url-scraper (0.3.15) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2023.2.17)

yt-dlp PYPI version 2023.2.17 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - scdlbot 0.15.0 - vk-url-scraper 0.3.15 - ytb-downloader 0.3.1 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

vk-url-scraper (0.3.30) potentially affected by CVE-2026-55404 via yt-dlp (2024.7.15.232803.dev0)

yt-dlp PYPI version 2024.7.15.232803.dev0 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - vk-url-scraper 0.3.30 Source cves: CVE-2026-55404 Source advisory: OSV:PYSEC-2026-3622...

gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2026-59937 via pypdf (4.3.0)

pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2026-59937 Source advisory: OSV:PYSEC-2026-3610...

gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2026-59938 via pypdf (4.3.0)

pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2026-59938 Source advisory: OSV:PYSEC-2026-3611...

gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2026-59935 via pypdf (4.3.0)

pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2026-59935 Source advisory: OSV:PYSEC-2026-3613...

CLEANSTART-2026-ZL91163 Security fixes in kubernetes-dashboard-metrics-scraper 1.2.2-r1

Package kubernetes-dashboard-metrics-scraper version 1.2.2-r1 fixes 5 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139...

CLEANSTART-2026-MX87072 Security fixes in kubernetes-dashboard-metrics-scraper 1.2.2-r2

Package kubernetes-dashboard-metrics-scraper version 1.2.2-r2 fixes 22 vulnerabilities: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-32280, CVE-2026-32281...

vk-url-scraper (>=0.2.1, <=0.3.5) potentially affected by CVE-2026-55404 via yt-dlp (2022.5.18)

yt-dlp PYPI version 2022.5.18 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - vk-url-scraper =0.2.1, =0.3.5 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

basketcase (3.0.2), gridplayer (0.4.3) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2022.7.18)

yt-dlp PYPI version 2022.7.18 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - basketcase 3.0.2 - gridplayer 0.4.3 - vk-url-scraper =0.3.8, =0.3.10 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...

scdlbot (0.15.0), vk-url-scraper (0.3.15) +1 more potentially affected by CVE-2026-55404 via yt-dlp (2023.2.17)

yt-dlp PYPI version 2023.2.17 is affected by a known vulnerability. The following packages have a transitive dependency on yt-dlp and may be impacted: - scdlbot 0.15.0 - vk-url-scraper 0.3.15 - ytb-downloader 0.3.1 Source cves: CVE-2026-55404 Source advisory: OSV:GHSA-6V4J-43GG-VJ32...