CVE-2026-35187 pyLoad has SSRF in parse_urls API endpoint via unvalidated URL parameter

pyLoad is a free and open-source download manager written in Python. In 0.5.0b3.dev96 and earlier, the parseurls API function in src/pyload/core/api/init.py fetches arbitrary URLs server-side via geturlurl pycurl without any URL validation, protocol restriction, or IP blacklist. An authenticated...

Grist 代码问题漏洞

Grist is a modern relational spreadsheet open-sourced by Grist. A code issue vulnerability exists in Grist versions prior to 1.7.7, which stems from a privileged network access risk in the server-side URL fetching functionality that could lead to an escalated attack...