https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T13:19:14.438217+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-85686 fkie_cve-2026-85686 2026-09-29T13:19:15.811613+00:00

ms-swift 4.5.2 contains a server-side request forgery vulnerability in the swift deploy OpenAI-compatible API that fetches multimodal media URLs without validation or redirect filtering. Unauthenticated attackers can supply arbitrary image_url, audio_url, or video_url parameters to make the server issue requests to internal services and cloud metadata endpoints.

 https://vulnerability.circl.lu/vuln/ghsa-hrmr-fv6h-885h GHSA-hrmr-fv6h-885h 2026-09-29T13:19:15.811773+00:00

ms-swift 4.5.2 contains a server-side request forgery vulnerability in the swift deploy OpenAI-compatible API that fetches multimodal media URLs without validation or redirect filtering. Unauthenticated attackers can supply arbitrary image_url, audio_url, or video_url parameters to make the server issue requests to internal services and cloud metadata endpoints.