https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-10T03:26:43.853915+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-85179 CVE-2026-85179 — Label Studio through 1.23.0 SSRF via Unvalidated Webhook URL 2026-10-10T03:26:43.922205+00:00

Affected: HumanSignal label-studio

Label Studio through 1.23.0 fails to validate webhook URLs, allowing authenticated users to dispatch requests to internal services including RFC 1918 addresses and cloud metadata endpoints. Attackers can create webhooks targeting private networks and exfiltrate annotation data by enabling payload transmission in outbound requests.