Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 03:13:25 +0000 CVE-2026-73058 — stoatchat before 0.15.0 SSRF via IPv6 unspecified address bypass https://vulnerability.circl.lu/vuln/cve-2026-73058 <p><strong>Affected:</strong> stoatchat</p> <p>stoatchat versions before 0.15.0 fail to block the IPv6 unspecified address (::) in the SSRF blocklist, allowing unauthenticated attackers to bypass protections via the /proxy and /embed endpoints. Attackers can craft requests using IPv6 literal syntax to access services on the loopback interface and retrieve sensitive internal content.</p> <p><strong>Affected:</strong> stoatchat</p> <p>stoatchat versions before 0.15.0 fail to block the IPv6 unspecified address (::) in the SSRF blocklist, allowing unauthenticated attackers to bypass protections via the /proxy and /embed endpoints. Attackers can craft requests using IPv6 literal syntax to access services on the loopback interface and retrieve sensitive internal content.</p> https://vulnerability.circl.lu/vuln/cve-2026-73058