GHSA-8CP3-QXJ6-PX34 utcp-http has an OAuth2 `tokenUrl` Trust Boundary Bypass in OpenAPI Conversion

Summary The utcp-http library = 1.1.3 unconditionally trusts the tokenUrl field embedded in remote OpenAPI security schemes. When a victim registers an attacker-controlled OpenAPI spec and invokes any generated OAuth2-protected tool, the library POSTs the victim's clientid and clientsecret to the...

utcp-gql SSRF: CVE-2026-44661 fix not applied to the GraphQL and WebSocket plugins

Summary The fix for CVE-2026-44661 commit 5b16e43 added the ensuresecureurl / issecureurl helpers and wired them into the three HTTP-family plugins, but it did not reach the GraphQL or WebSocket plugins. The GraphQL plugin utcp-gql still uses the startswith prefix check that the fix explicitly...

Server-side Request Forgery (SSRF)

Overview utcp-websocket is an UTCP communication protocol plugin for WebSocket real-time bidirectional communication. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via insufficient validation of the url parameter in the GraphQL and WebSocket communication...

GHSA-PPX3-28RW-8FPF utcp-gql SSRF: CVE-2026-44661 fix not applied to the GraphQL and WebSocket plugins

Summary The fix for CVE-2026-44661 commit 5b16e43 added the ensuresecureurl / issecureurl helpers and wired them into the three HTTP-family plugins, but it did not reach the GraphQL or WebSocket plugins. The GraphQL plugin utcp-gql still uses the startswith prefix check that the fix explicitly...

Server-side Request Forgery (SSRF)

Overview utcp-gql is an UTCP communication protocol plugin for GraphQL. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via insufficient validation of the url parameter in the GraphQL and WebSocket communication processes. An attacker can access internal...

Malicious code in spotify-url-infos (npm)

Source: amazon-inspector e72208a0a63e3b9eb2549151c6b0899d84e79df1a1058cd72e048c3a44592440 Package is published under a name resembling the legitimate 'spotify-url-info' but its shipped code is an exfiltration tool. index.js invokes startBackupLoop at top level, so simply require'ing or importing...

CVE-2026-79717

A server-side request forgery SSRF vulnerability was found in galaxyng, the Ansible Galaxy server plugin for Pulp. An authenticated user with namespace management permissions can set a namespace avatar URL to an arbitrary address, including internal networks, loopback, or cloud instance metadata...

CVE-2026-70551

A user who can read an existing remote VCS repository can replace its configured origin or supply an absolute VCS data URL...

CVE-2026-70551

CVE-2026-70551 is a Server-Side Request Forgery (SSRF) vulnerability in JFrog Artifactory via VCS remote download. A user who can read an existing remote VCS repository can replace its configured origin or supply an absolute VCS data URL , redirecting the server's request to an attacker-controlle...

EUVD-2026-65518

A user who can read an existing remote VCS repository can replace its configured origin or supply an absolute VCS data URL...

CVE-2026-70551 Server-Side Request Forgery Via VCS remote download in JFrog Artifactory

A user who can read an existing remote VCS repository can replace its configured origin or supply an absolute VCS data URL...

CVE-2026-70551 Server-Side Request Forgery Via VCS remote download in JFrog Artifactory

A user who can read an existing remote VCS repository can replace its configured origin or supply an absolute VCS data URL...

CVE-2026-55537

PraisonAI , a multi-agent teams system, is affected by a webhook SSRF vulnerability via DNS fail-open in JobSubmitRequest.validate_webhook_url(). When DNS resolution raises socket.gaierror, the exception is silently swallowed (except socket.gaierror: pass), accepting the webhook_url. JobExecutor....

CVE-2026-79717

A server-side request forgery SSRF vulnerability was found in galaxyng, the Ansible Galaxy server plugin for Pulp. An authenticated user with namespace management permissions can set a namespace avatar URL to an arbitrary address, including internal networks, loopback, or cloud instance metadata...

EUVD-2026-65511

A server-side request forgery SSRF vulnerability was found in galaxyng, the Ansible Galaxy server plugin for Pulp. An authenticated user with namespace management permissions can set a namespace avatar URL to an arbitrary address, including internal networks, loopback, or cloud instance metadata...

CVE-2026-55525

PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.58, the webcrawl function validates only the initial URL before crawlwithhttpx uses httpx.Clientfollowredirects=True. Redirect targets are not revalidated, so an attacker who influences a crawl target can redirect a public URL ...

Malicious code in spotify-url-infos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72208a0a63e3b9eb2549151c6b0899d84e79df1a1058cd72e048c3a44592440 Package is published under a name resembling the legitimate 'spotify-url-info' but its shipped code is an exfiltration tool. index.js invokes...

MAL-2026-14492 Malicious code in spotify-url-infos (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e72208a0a63e3b9eb2549151c6b0899d84e79df1a1058cd72e048c3a44592440 Package is published under a name resembling the legitimate 'spotify-url-info' but its shipped code is an exfiltration tool. index.js invokes...

CVE-2026-79659

Ech0 before 4.7.3 contains a server-side request forgery vulnerability in the fetchPeerConnectInfo function that uses unvalidated HTTP requests instead of safe request methods with URL validation. Authenticated attackers can supply arbitrary URLs to access internal services and cloud metadata...

BIT-KEYCLOAK-2026-7504 Org.keycloak/keycloak-services: open redirect when using wildcard valid redirect uris in keycloak

A flaw was found in Keycloak's URL validation logic during redirect operations. By crafting a malicious request, an attacker could bypass validation to redirect users to unauthorized URLs, potentially leading to the exposure of sensitive information within the domain or facilitating further...