https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-10T15:08:54.872648+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-107273 fkie_cve-2026-107273 2026-10-10T15:08:55.444377+00:00

Gophish 0.11.0 through 0.12.1 contains a server-side request forgery vulnerability that allows authenticated low-privileged users to reach loopback and private hosts via POST /api/import/site. Attackers can submit internal URLs, which the default dialer deny list does not block, to read service responses and enumerate internal hosts and ports through error messages.

 https://vulnerability.circl.lu/vuln/ghsa-5724-58m3-c7r6 GHSA-5724-58m3-c7r6 2026-10-10T15:08:55.444498+00:00

Gophish 0.11.0 through 0.12.1 contains a server-side request forgery vulnerability that allows authenticated low-privileged users to reach loopback and private hosts via POST /api/import/site. Attackers can submit internal URLs, which the default dialer deny list does not block, to read service responses and enumerate internal hosts and ports through error messages.