https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T15:08:05.568389+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-63769 fkie_cve-2026-63769 2026-09-29T15:08:11.872176+00:00

Huginn before 2026.09.09 contains a server-side request forgery vulnerability in the fetch_url method of ScenarioImport that allows authenticated users to make arbitrary HTTP requests by submitting crafted URLs. Attackers can probe internal network services, enumerate ports via error signatures, and access cloud metadata endpoints to retrieve sensitive credentials.

 https://vulnerability.circl.lu/vuln/ghsa-9r7r-j892-2c6m GHSA-9r7r-j892-2c6m 2026-09-29T15:08:11.872364+00:00

Huginn through 2022.08.18 contains a server-side request forgery vulnerability in the fetch_url method of ScenarioImport that allows authenticated users to make arbitrary HTTP requests by submitting crafted URLs. Attackers can probe internal network services, enumerate ports via error signatures, and access cloud metadata endpoints to retrieve sensitive credentials.