https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-13T19:50:34.830201+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-108735 fkie_cve-2026-108735 2026-10-13T19:50:34.878264+00:00

Miniflux 2.3.0 through 2.3.3 contains a server-side request forgery vulnerability that allows authenticated users to reach internal addresses by setting a feed's proxy_url. Attackers can point proxy_url at loopback or internal hosts, bypassing FETCHER_ALLOW_PRIVATE_NETWORKS checks to probe internal ports and send proxy-style requests to internal services.

 https://db.gcve.eu/vuln/ghsa-f5cv-wgfv-h2x2 GHSA-f5cv-wgfv-h2x2 2026-10-13T19:50:34.878404+00:00

Miniflux 2.3.0 through 2.3.3 contains a server-side request forgery vulnerability that allows authenticated users to reach internal addresses by setting a feed's proxy_url. Attackers can point proxy_url at loopback or internal hosts, bypassing FETCHER_ALLOW_PRIVATE_NETWORKS checks to probe internal ports and send proxy-style requests to internal services.