https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-28T08:10:38.186601+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-86259 fkie_cve-2026-86259 2026-09-28T08:10:38.207387+00:00

OpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allowing unauthenticated attackers to reach cloud instance metadata services. Attackers can supply arbitrary provider URLs via the x-base-url header or baseUrl parameter to access sensitive cloud credentials and metadata.

 https://db.gcve.eu/vuln/ghsa-6j8v-fv4p-986p GHSA-6j8v-fv4p-986p 2026-09-28T08:10:38.207451+00:00

OpenMAIC before 1.0.1 skips server-side request forgery validation in non-production builds, allowing unauthenticated attackers to reach cloud instance metadata services. Attackers can supply arbitrary provider URLs via the x-base-url header or baseUrl parameter to access sensitive cloud credentials and metadata.