CVE-2026-120416 AndyFactory newspaper4k Image Extractor image_extractor.py Article.parse server-side request forgery

A security vulnerability has been detected in AndyFactory newspaper4k up to 0.9.6. This affects the function Article.parse of the file newspaper/extractors/imageextractor.py of the component Image Extractor. Such manipulation leads to server-side request forgery. It is possible to launch the atta...