CVE-2026-124442

AzuraCast versions before 0.24.0 are vulnerable to a Server-Side Request Forgery (SSRF) . Users with station WebHooks permission can bypass the UserUrlFilter SSRF guard by using HTTP redirects. By configuring webhooks for platforms like Mastodon, Telegram, GroupMe, or RadioReg to point to a redir...

Snyk CLI Insertion of Sensitive Information into Log File allowed in DEBUG or DEBUG/TRACE mode

Versions of the package snyk before 1.1297.3 are vulnerable to Insertion of Sensitive Information into Log File through local Snyk CLI debug logs. Container Registry credentials provided via environment variables or command line arguments can be exposed when executing Snyk CLI in DEBUG or...