OPENSUSE-SU-2026:12265-1 python313-wyoming-1.10.2-1.1 on GA media

These are all security issues fixed in the python313-wyoming-1.10.2-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2026-8712

Wyoming before 1.10.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers with network access to force outbound connections to arbitrary targets by supplying a malicious uri query parameter to the HTTP API. Attackers can pass arbitrary tcp:// or unix:// URIs...

CVE-2026-8712

Wyoming before 1.10.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers with network access to force outbound connections to arbitrary targets by supplying a malicious uri query parameter to the HTTP API. Attackers can pass arbitrary tcp:// or unix:// URIs...

CVE-2026-8712 Wyoming < 1.10.2 SSRF via uri Query Parameter

Wyoming before 1.10.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers with network access to force outbound connections to arbitrary targets by supplying a malicious uri query parameter to the HTTP API. Attackers can pass arbitrary tcp:// or unix:// URIs...

CVE-2026-8712 Wyoming < 1.10.2 SSRF via uri Query Parameter

Wyoming before 1.10.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers with network access to force outbound connections to arbitrary targets by supplying a malicious uri query parameter to the HTTP API. Attackers can pass arbitrary tcp:// or unix:// URIs...

ubo-app (>=2.0.1.dev260806103484810252, <=2.1.0), wyoming-azure-speech (0.1.1) +7 more potentially affected by CVE-2026-8712 via wyoming (>=1.1.0, <=1.10.0)

wyoming PYPI version =1.1.0, =2.0.1.dev260806103484810252, =3.0.0.post1, =0.3.2, =1.3.0, =1.6.3 - wyoming-porcupine1 1.0.1 - wyoming-satellite 1.0.0 - wyoming-snowboy 1.0.0 Source cves: CVE-2026-8712 Source advisory: MEND:CVE-2026-8712...

EUVD-2026-69417

Wyoming before 1.10.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers with network access to force outbound connections to arbitrary targets by supplying a malicious uri query parameter to the HTTP API. Attackers can pass arbitrary tcp:// or unix:// URIs...

CVE-2026-8712

Wyoming before 1.10.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers with network access to force outbound connections to arbitrary targets by supplying a malicious "uri" query parameter to the HTTP API. Attackers can pass arbitrary "tcp://" or "unix://...

CVE-2026-8712 Wyoming < 1.10.2 SSRF via uri Query Parameter

Wyoming before 1.10.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers with network access to force outbound connections to arbitrary targets by supplying a malicious uri query parameter to the HTTP API. Attackers can pass arbitrary tcp:// or unix:// URIs...

CVE-2026-8712

Wyoming before 1.10.2 contains a server-side request forgery (SSRF) vulnerability. Unauthenticated attackers with network access can supply a malicious uri query parameter containing arbitrary tcp:// or unix:// URIs to the HTTP API endpoints /api/info, /api/speech-to-text, and /api/text-to-speech...

CVE-2026-8712: Server-Side Request Forgery (SSRF)

Wyoming before 1.10.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers with network access to force outbound connections to arbitrary targets by supplying a malicious uri query parameter to the HTTP API. Attackers can pass arbitrary tcp:// or unix:// URIs...

PT-2026-84377

Name of the Vulnerable Software and Affected Versions Wyoming versions prior to 1.10.2 Description An issue allows unauthenticated attackers with network access to perform server-side request forgery SSRF, a technique where an attacker forces a server to make requests to an unintended location. B...

A US Company Enabled a North Korean Scam That Raised Money for WMDs

Wyoming’s secretary of state has proposed ways of “preventing fraud and abuse of corporate filings by commercial registered agents” in the aftermath of the scheme’s exposure...

COVID-19 Results for 25% of Wyoming Accidentally Posted Online

The Wyoming Department of Health WDH said on Wednesday it accidentally posted COVID test results of state residents onto their public-facing storage buckets. The WDH said in a public advisory that an employee fumbled the health information of about 164,021 Wyoming residents and of people from oth...

wyomingnews.mycapture.com Cross Site Scripting vulnerability OBB-1415720

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

onmedia.wyomingcityschools.org XSS vulnerability

Open Bug Bounty ID: OBB-696136 Description| Value ---|--- Affected Website:| onmedia.wyomingcityschools.org Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3...

wyoming.farmvisit.com XSS vulnerability

Open Bug Bounty ID: OBB-653472 Description| Value ---|--- Affected Website:| wyoming.farmvisit.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

wyomingoutfitting.com XSS vulnerability

Open Bug Bounty ID: OBB-636897 Description| Value ---|--- Affected Website:| wyomingoutfitting.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

wyomilitary.wyo.gov XSS vulnerability

Vulnerable URL: http://wyomilitary.wyo.gov/wp-content/uploads/flipbook/8/bookContent.swf?currentHTMLURL=data:text/html;base64,PHNjcmlwdD5hbGVydCgnT1BFTiBCVUdCT1VOVFknKTwvc2NyaXB0Pg== Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.08.2017 Vulnerability type:| XSS...

longview.explore-wyoming.us XSS vulnerability

Vulnerable URL: http://longview.explore-wyoming.us/profile/Demographicsbyzipcode.asp?zipcode=%3Csvg/onload=alert/OPENBUGBOUNTY/%3E Details: Description| Value ---|--- Patched:| Yes, at 29.07.2017 Latest check for patch:| 29.07.2017 19:29 GMT Vulnerability type:| XSS Vulnerability status:| Publicl...