CVE-2026-6613

creationtimestamp| type| source ---|---|--- 2026-04-20 08:17:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvzri6ulf2q...

CVE-2026-6610

creationtimestamp| type| source ---|---|--- 2026-04-20 08:04:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvz24uuwb2k...

CVE-2026-6614

creationtimestamp| type| source ---|---|--- 2026-04-20 07:48:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvy5gpocu2c...

CVE-2026-6608

creationtimestamp| type| source ---|---|--- 2026-04-20 07:46:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvxztxyb32r...

CVE-2026-6618

A flaw has been found in langgenius dify up to 1.13.3. This issue affects the function parseopenaipluginjsontotoolbundle of the file api/core/tools/utils/parser.py of the component ApiBasedToolSchemaParser. Executing a manipulation of the argument url can lead to server-side request forgery. The...

CVE-2026-6618 langgenius dify ApiBasedToolSchemaParser parser.py parse_openai_plugin_json_to_tool_bundle server-side request forgery

A flaw has been found in langgenius dify up to 1.13.3. This issue affects the function parseopenaipluginjsontotoolbundle of the file api/core/tools/utils/parser.py of the component ApiBasedToolSchemaParser. Executing a manipulation of the argument url can lead to server-side request forgery. The...

CVE-2026-6598

creationtimestamp| type| source ---|---|--- 2026-04-20 07:39:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvxniokvd2q...

CVE-2024-7083

creationtimestamp| type| source ---|---|--- 2026-04-20 07:38:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvxlna6wz2c 2026-04-25 10:33:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mkcto3ywfa2h...

CVE-2026-4079

creationtimestamp| type| source ---|---|--- 2026-04-20 07:37:06+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mjvxis6jj724...

CVE-2026-6617 langgenius dify ApiToolManageService api_tools_manage_service.py get_api_tool_provider_remote_schema server-side request forgery

A vulnerability was detected in langgenius dify up to 0.6.9. This vulnerability affects the function getapitoolproviderremoteschema of the file api/services/tools/apitoolsmanageservice.py of the component ApiToolManageService. Performing a manipulation of the argument url results in server-side...

Server-side Request Forgery (SSRF)

Overview agentscope is an AgentScope: A Flexible yet Robust Multi-Agent Platform. Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the processaudioblock function. An attacker can make unauthorized requests to internal or external systems by supplying crafte...

CVE-2026-6587

A flaw was found in vibrantlabsai RAGAS. A remote attacker can exploit a server-side request forgery SSRF vulnerability by manipulating the retrievedcontexts argument within the tryprocesslocalfile or tryprocessurl functions. This manipulation allows the attacker to induce the server to make...

CVE-2021-26947

creationtimestamp| type| source ---|---|--- 2026-04-20 05:29:04+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-26947.yaml...

CVE-2026-6606

A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function processaudioblock of the file src/agentscope/agent/agentbase.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack...

CVE-2026-6604

A vulnerability was identified in modelscope agentscope up to 1.0.18. Affected by this issue is the function parseurl/prepareimage/openaiaudiototext of the file src/agentscope/tool/multimodality/openaitools.py of the component Cloud Metadata Endpoint. Such manipulation of the argument...

CVE-2026-6605

A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function getbytesfromweburl of the file src/agentscope/utils/common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the...

CVE-2026-6606

Scope: modelscope agentscope

CVE-2026-6606

A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function processaudioblock of the file src/agentscope/agent/agentbase.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack...

CVE-2026-6592

creationtimestamp| type| source ---|---|--- 2026-04-20 04:33:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjvnakp2dp2v...

CVE-2026-6605 modelscope agentscope Internal Service _common.py _get_bytes_from_web_url server-side request forgery

A security flaw has been discovered in modelscope agentscope up to 1.0.18. This affects the function getbytesfromweburl of the file src/agentscope/utils/common.py of the component Internal Service. Performing a manipulation results in server-side request forgery. It is possible to initiate the...