Threats affecting pkg:pypi/newspaper4k

CVE-2026-120416 is a server-side request forgery (SSRF) vulnerability in the AndyFactory newspaper4k software affecting versions 0.9.0 through 0.9.6. The flaw exists in the Article.parse function within the image_extractor.py component. This vulnerability allows remote attackers to manipulate the server to make unauthorized requests. The issue is resolved by upgrading to version 0.9.6.1.