https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-05T09:11:57.624008+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-122140 fkie_cve-2026-122140 2026-11-05T09:11:57.625849+00:00

Trawl 1.5.0 before 1.10.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to bypass the MCP outbound URL policy using IPv4-mapped IPv6 addresses. Attackers can supply hex-normalized addresses like ::ffff:7f00:1 directly or via redirects to fetch loopback, private, and cloud metadata services and read responses.

 https://db.gcve.eu/vuln/ghsa-42jx-rr99-g8v2 GHSA-42jx-rr99-g8v2 2026-11-05T09:11:57.625926+00:00

Trawl 1.5.0 before 1.10.0 contains a server-side request forgery vulnerability that allows unauthenticated attackers to bypass the MCP outbound URL policy using IPv4-mapped IPv6 addresses. Attackers can supply hex-normalized addresses like ::ffff:7f00:1 directly or via redirects to fetch loopback, private, and cloud metadata services and read responses.