Threats tagged 'ghsa-g4fw-p4hw-gq39'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.3	EPSS 0.4%	CVE-2026-19246HKUDS nanobot · Server-Side Request Forgery Medium5.3EPSS 0.4%2026-08-07GCVE DatabaseCVE-2026-19246 CVE-2026-19246 is a server-side request forgery (SSRF) vulnerability in HKUDS nanobot versions up to 0.2.1. It affects the _download_image_data_url function in the nanobot/providers/image_generation.py component, allowing remote attackers to initiate SSRF attacks. A patch is available on the main branch and planned for release in version 0.3.1. EPSS 0.4%Report on CVE-2026-19246 Vulnerability CWE-918 #ghsa-g4fw-p4hw-gq39	GCVE Database	2026-08-07

Page 1 of 1