https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 28 Sep 2026 20:55:32 +0000 https://db.gcve.eu/vuln/cve-2026-92569 <p><strong>Affected:</strong> opengoofy hippo4j</p> <p>Hippo4j through 1.5.0 contains a server-side request forgery vulnerability in four ThreadPoolController endpoints that fail to validate the clientAddress parameter. Authenticated attackers can supply arbitrary hostnames and ports to trigger outbound GET requests to internal networks and cloud metadata services.</p> <p><strong>Affected:</strong> opengoofy hippo4j</p> <p>Hippo4j through 1.5.0 contains a server-side request forgery vulnerability in four ThreadPoolController endpoints that fail to validate the clientAddress parameter. Authenticated attackers can supply arbitrary hostnames and ports to trigger outbound GET requests to internal networks and cloud metadata services.</p> https://db.gcve.eu/vuln/cve-2026-92569