https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-29T19:56:25.942340+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-90769 fkie_cve-2026-90769 2026-09-29T19:56:25.959500+00:00

Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. Attackers can supply arbitrary URLs to read cloud metadata, internal network services, and localhost-bound services through the application server's direct HTTP requests.

 https://db.gcve.eu/vuln/ghsa-wr7p-6rrg-8m28 GHSA-wr7p-6rrg-8m28 2026-09-29T19:56:25.959588+00:00

Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. Attackers can supply arbitrary URLs to read cloud metadata, internal network services, and localhost-bound services through the application server's direct HTTP requests.