https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-06T20:11:40.394942+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-119709 fkie_cve-2026-119709 2026-11-06T20:11:40.396203+00:00

Grimoire before 1.0.0 contains an unauthenticated server-side request forgery vulnerability in the /api/fetch-metadata POST handler that passes user-supplied URLs to getMetadata() without authentication checks. Attackers can submit URLs targeting loopback, internal-network, or cloud metadata endpoints and read the parsed title, description, and page content returned.

 https://db.gcve.eu/vuln/ghsa-v3p4-vhx3-fmh5 GHSA-v3p4-vhx3-fmh5 2026-11-06T20:11:40.396299+00:00

Grimoire before 1.0.0 contains an unauthenticated server-side request forgery vulnerability in the /api/fetch-metadata POST handler that passes user-supplied URLs to getMetadata() without authentication checks. Attackers can submit URLs targeting loopback, internal-network, or cloud metadata endpoints and read the parsed title, description, and page content returned.