gitea -- Multiple vulnerabilities

Gitea reports This release contains fixes for 45 security issues, including privilege escalation, remote denial of service, server-side request forgery, authorization and token scope bypasses, and information disclosure vulnerabilities. Please upgrade as soon as possible...

PT-2026-57724

Server-Side Request Forgery SSRF vulnerability in bdthemes Instant Image Generator ai-image allows Server Side Request Forgery.This issue affects Instant Image Generator: from n/a through = 2.1.4...

Anticipating Decoder Side-Channel Attacks in Fault-Tolerant Quantum Computers

As quantum computing emerges as an applied technology, there is a growing need to protect quantum computers against information security attacks. This work identifies a new class of side-channel attacks against fault-tolerant quantum computers, in which the syndrome data that is sent to the decod...

PT-2026-59097

A High severity Server-Side Template Injection SSTI vulnerability exists in the trestle author jinja command. The command recursively evaluates rendered templates, allowing an attacker to achieve arbitrary command execution with privileges of the running process by injecting malicious payloads in...

PT-2026-57687

Server-Side Request Forgery SSRF vulnerability in denishua WPJAM Basic wpjam-basic allows Server Side Request Forgery.This issue affects WPJAM Basic: from n/a through = 7.0...

CVE-2025-45869

LogicalDOC Enterprise Version up to and before v9.1.1 is vulnerable to Server-Side Request Forgery SSRF. An unauthenticated attacker can exploit the ShareFileCallback servlet by manipulating input parameters to trigger a server-side request to an attacker-controlled host...

PT-2026-57660

A Server-Side Request Forgery SSRF protection bypass existed in the html to markdown expansion module of misp-modules. The module attempts to prevent requests to loopback, private, link-local, and other restricted IP address ranges. However, IP addresses were compared against the blocked ranges...

PT-2026-59385

Summary The SafePlaywrightURLLoader implements a validate url function to prevent SSRF attacks by checking the IP address of the user-provided URL. However, this validation is performed only on the initial URL. Since Playwright automatically follows HTTP redirects 301/302 by default, an attacker...

PT-2026-57795

Name of the Vulnerable Software and Affected Versions Themeisle Auto Featured Image Auto Post Thumbnail versions prior to 5.0.5 Description Server-Side Request Forgery SSRF occurs in the auto-post-thumbnail component, which allows an attacker to induce the server-side application to make requests...

PT-2026-59540

Summary PraisonAI's direct-prompt CLI automatically expands @url: mentions in raw prompt text before agent execution begins. If a prompt contains @url:, the CLI calls MentionsParser.process.... The @url: handler then performs a direct urllib.request.urlopen request to the attacker-controlled URL...

PT-2026-57612

A vulnerability was detected in kLOsk adloop up to 0.9.0. This vulnerability affects the function validate urls of the file src/adloop/ads/write.py. Performing a manipulation of the argument final url results in server-side request forgery. The attack may be initiated remotely. The exploit is now...

PT-2026-60023

Summary A CSS injection issue exists in WeasyPrint when HTML presentational hints are enabled. Unescaped attribute values are embedded into CSS, allowing injection of arbitrary CSS declarations. This affects applications processing untrusted HTML input. Details File: weasyprint/css/ init .py The...

PT-2026-57853

Name of the Vulnerable Software and Affected Versions LogicalDOC Enterprise versions prior to 9.1.1 Description An unauthenticated attacker can perform a Server-Side Request Forgery SSRF, which occurs when a server is tricked into making requests to an unintended destination. The issue exists in...

PT-2026-58945

Summary An unauthenticated attacker can coerce the server into issuing HTTP requests to an attacker-chosen host by spoofing the X Forwarded-Host and X-Forwarded-Proto request headers. The forwarded host is used, without validation, to build the URL that server info update fetches with cURL,...

CVE-2025-45869

LogicalDOC Enterprise Version up to and before v9.1.1 is vulnerable to Server-Side Request Forgery SSRF. An unauthenticated attacker can exploit the ShareFileCallback servlet by manipulating input parameters to trigger a server-side request to an attacker-controlled host...

PT-2026-59292

A security flaw has been discovered in FoundationAgents MetaGPT up to 0.8.2. This impacts the function decode image of the file metagpt/utils/common.py. The manipulation of the argument img url or b64 results in server-side request forgery. It is possible to launch the attack remotely. The exploi...

PT-2026-59067

Summary AWS Encryption SDK ESDK for Python is a client-side encryption library. An issue exists where, under certain circumstances, a specific cryptographic algorithm downgrade in the caching layer might allow an authenticated local threat actor to bypass key commitment policy enforcement via a...

PT-2026-60050

Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs. A vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 through 1.2.1. Users are recommended to upgrade to...

PT-2026-59609

Summary A Server-Side Request Forgery SSRF vulnerability exists in Pydantic AI's URL download functionality. When applications accept message history from untrusted sources, attackers can include malicious URLs that cause the server to make HTTP requests to internal network resources, potentially...

PT-2026-59607

Summary A Server-Side Request Forgery SSRF vulnerability exists in Pydantic AI's URL download functionality. When applications accept message history from untrusted sources, attackers can include malicious URLs that cause the server to make HTTP requests to internal network resources, potentially...