112672 matches found
Important: Red Hat Security Advisory: grafana-pcp security update
An update for grafana-pcp is now available for Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
CVE-2026-6625
creationtimestamp| type| source ---|---|--- 2026-04-20 11:16:38+00:00| seen| Telegram/dHFBNa6z0pCHPScrBZS6WnqsKmYP7k1ORYb9rRTMhJ2WJuM 2026-04-20 12:20:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjwhd2vsya2i...
CVE-2026-6625
A security vulnerability has been detected in moxi624 Mogu Blog v2 up to 5.2. Affected by this vulnerability is the function LocalFileServiceImpl.uploadPictureByUrl of the file mogupicture/src/main/java/com/moxi/mogublog/picture/service/impl/LocalFileServiceImpl.java of the component Picture...
Important: Red Hat Security Advisory: grafana security update
An update for grafana is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
net/url: Incorrect parsing of IPv6 host literals in net/url
The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...
EUVD-2026-23805
A vulnerability was detected in langgenius dify up to 0.6.9. This vulnerability affects the function getapitoolproviderremoteschema of the file api/services/tools/apitoolsmanageservice.py of the component ApiToolManageService. Performing a manipulation of the argument url results in server-side...
CVE-2026-6625
A security vulnerability has been detected in moxi624 Mogu Blog v2 up to 5.2. Affected by this vulnerability is the function LocalFileServiceImpl.uploadPictureByUrl of the file mogupicture/src/main/java/com/moxi/mogublog/picture/service/impl/LocalFileServiceImpl.java of the component Picture...
CVE-2026-6613
creationtimestamp| type| source ---|---|--- 2026-04-20 08:17:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvzri6ulf2q...
CVE-2026-6610
creationtimestamp| type| source ---|---|--- 2026-04-20 08:04:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvz24uuwb2k...
CVE-2026-6614
creationtimestamp| type| source ---|---|--- 2026-04-20 07:48:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvy5gpocu2c...
CVE-2026-6608
creationtimestamp| type| source ---|---|--- 2026-04-20 07:46:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvxztxyb32r...
CVE-2026-6618
A flaw has been found in langgenius dify up to 1.13.3. This issue affects the function parseopenaipluginjsontotoolbundle of the file api/core/tools/utils/parser.py of the component ApiBasedToolSchemaParser. Executing a manipulation of the argument url can lead to server-side request forgery. The...
CVE-2026-6618 langgenius dify ApiBasedToolSchemaParser parser.py parse_openai_plugin_json_to_tool_bundle server-side request forgery
A flaw has been found in langgenius dify up to 1.13.3. This issue affects the function parseopenaipluginjsontotoolbundle of the file api/core/tools/utils/parser.py of the component ApiBasedToolSchemaParser. Executing a manipulation of the argument url can lead to server-side request forgery. The...
CVE-2026-6598
creationtimestamp| type| source ---|---|--- 2026-04-20 07:39:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvxniokvd2q...
CVE-2024-7083
creationtimestamp| type| source ---|---|--- 2026-04-20 07:38:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvxlna6wz2c 2026-04-25 10:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkcto3ywfa2h...
CVE-2026-4079
creationtimestamp| type| source ---|---|--- 2026-04-20 07:37:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mjvxis6jj724...
CVE-2026-6617 langgenius dify ApiToolManageService api_tools_manage_service.py get_api_tool_provider_remote_schema server-side request forgery
A vulnerability was detected in langgenius dify up to 0.6.9. This vulnerability affects the function getapitoolproviderremoteschema of the file api/services/tools/apitoolsmanageservice.py of the component ApiToolManageService. Performing a manipulation of the argument url results in server-side...
Server-side Request Forgery (SSRF)
Overview agentscope is an AgentScope: A Flexible yet Robust Multi-Agent Platform. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the processaudioblock function. An attacker can make unauthorized requests to internal or external systems by supplying crafte...
CVE-2026-6587
A flaw was found in vibrantlabsai RAGAS. A remote attacker can exploit a server-side request forgery SSRF vulnerability by manipulating the retrievedcontexts argument within the tryprocesslocalfile or tryprocessurl functions. This manipulation allows the attacker to induce the server to make...