Decidim - Push subscriptions can be abused for server-side requests

Description The push-subscription endpoint stores an attacker-controlled delivery URL, and the notification send path becomes an outbound-request sink when VAPID delivery is enabled. The practical result is an authenticated, stored, mostly blind SSRF primitive to arbitrary HTTPS endpoints reachab...

PT-2026-59539

Summary PraisonAI's spider tools URL validation can be bypassed using alternate loopback host encodings. The affected component is: text praisonaiagents/tools/spider tools.py The tool contains a URL validation function intended to block local or unsafe targets before fetching attacker-controlled...

PT-2026-60023

Summary A CSS injection issue exists in WeasyPrint when HTML presentational hints are enabled. Unescaped attribute values are embedded into CSS, allowing injection of arbitrary CSS declarations. This affects applications processing untrusted HTML input. Details File: weasyprint/css/ init .py The...

PT-2026-59573

Summary PraisonAI's spider tools URL validation can be bypassed using alternate loopback host encodings. The affected component is: text praisonaiagents/tools/spider tools.py The tool contains a URL validation function intended to block local or unsafe targets before fetching attacker-controlled...

PT-2026-57679

URL path injection via unencoded user-supplied identifiers vulnerability in Apache Gravitino. This issue affects Apache Gravitino: from 1.0.0 before 1.2.1. Users are recommended to upgrade to version 1.2.1, which fixes the issue...

PT-2026-59281

A vulnerability has been found in dmitryglhf mcp-url-downloader up to 4b8cf2de55f6e8864a77d108e8a94a5b8e4394c6. Affected by this issue is the function validate url safe of the file src/mcp url downloader/server.py. Such manipulation of the argument url leads to server-side request forgery. The...

CVE-2020-26296

creationtimestamp| type| source ---|---|--- 2026-07-12 23:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqic67endd25...

CVE-2026-15508 Helicone ai-gateway AWS Metadata Service service.rs build_target_url server-side request forgery

A flaw has been found in Helicone ai-gateway up to 0.2.0-beta.30. This affects the function buildtargeturl of the file ai-gateway/src/dispatcher/service.rs of the component AWS Metadata Service. Executing a manipulation of the argument extractedpathandquery can lead to server-side request forgery...

CVE-2026-15508

Helicone ai-gateway (up to 0.2.0-beta.30) is affected. The flaw is in the AWS Metadata Service component, specifically the build_target_url function in ai-gateway/src/dispatcher/service.rs, where manipulating extracted_path_and_query can trigger server-side request forgery. Exploitation is possib...

GHSA-XX7V-HQXH-CJR9

creationtimestamp| type| source ---|---|--- 2026-07-12 22:00:06+00:00| seen| https://t.me/securixykz/1284 2026-07-13 00:00:16+00:00| published-proof-of-concept| https://t.me/securixykz/1284...

Malicious code in api-changelly (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a94f4aa368f1838507a78dde78062b740a5853b516d9d32782d0264b539b724c The package declares preinstall: node index.js, which runs automatically on npm install. index.js collects installer identifiers os.hostname,...

CVE-2026-15543

creationtimestamp| type| source ---|---|--- 2026-07-12 18:27:49+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116908416613742285 2026-07-13 08:38:53+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqjc4mqeda2i 2026-07-13 10:37:37+00:00| seen|...

CVE-2026-10668

creationtimestamp| type| source ---|---|--- 2026-07-12 17:38:08+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqhprwyn4c2z 2026-07-12 19:42:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mqhwq52yrt2l...

GHSA-6FFX-8HJJ-JHHF

creationtimestamp| type| source ---|---|--- 2026-07-12 17:21:01+00:00| seen| https://bsky.app/profile/malwareobserver.bsky.social/post/3mqhotdnxkt22...

Malicious code in polymarket-kelly-math-stake (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2cf5ba9cd75b1a773e3a04e6eb45778894e04fd1d55b2e8ad03ae97deb41d16 [email protected] runs a postinstall script scripts/install-check.cjs that fetches a JSON config from...

Server-side Request Forgery (SSRF)

Overview AstrBot is a 易上手的多平台 LLM 聊天机器人及开发框架 Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the ToolsRoute.testmcpconnection function. An attacker can make unauthorized requests to internal or external systems by supplying crafted input to the...

GHSA-3GJH-29FV-8HR6

creationtimestamp| type| source ---|---|--- 2026-07-12 12:51:29+00:00| seen| https://gist.github.com/MattHintz/18acc078a9239f65f06d48e0e8ada1e3...

CVE-2026-15499

creationtimestamp| type| source ---|---|--- 2026-07-12 12:35:56+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh6vl7eaj2x 2026-07-13 21:22:44+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkmshvwml2y 2026-07-14 00:38:47+00:00| seen|...

CVE-2026-61874

creationtimestamp| type| source ---|---|--- 2026-07-12 12:34:30+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqh6sys2qc2e 2026-07-14 01:00:29+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mqkyxtlm5b2w 2026-07-16 08:14:49+00:00| seen|...

EUVD-2026-43237

A security vulnerability has been detected in AstrBotDevs AstrBot up to 4.25.2. Affected by this issue is the function ToolsRoute.testmcpconnection of the file astrbot/dashboard/routes/tools.py of the component MCP Test Endpoint. The manipulation of the argument mcpserverconfig.url leads to...