{"id":"EUVD-2026-36308","revision":"af106e98cb574b84aa653562f4c3114c","records":[{"revision":"af106e98cb574b84aa653562f4c3114c","observedAt":"2026-10-28T07:18:55.84+00:00","statement":{"source":"euvd","id":"EUVD-2026-36308","aliases":["CVE-2026-53782","GHSA-3vx2-vqx8-jxfg"],"title":"Summarize before 0.17.0 contains a server-side request forgery vulnerability that allows attackers who control a podcast RSS feed to direct the host to fetch transcript content from loopback addresses, link-local addresses, RFC 1918 private…","description":"Summarize before 0.17.0 contains a server-side request forgery vulnerability that allows attackers who control a podcast RSS feed to direct the host to fetch transcript content from loopback addresses, link-local addresses, RFC 1918 private ranges, or other reserved destinations by supplying malicious podcast:transcript URL values. Attackers can bypass protections through DNS rebinding and redirect-based techniques, as redirect targets are not revalidated and hostnames are not resolved before request dispatch, exposing internal service responses through the summarization flow.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N","score":6.3,"severity":null}],"references":["https://github.com/steipete/summarize/releases/tag/v0.17.0","https://github.com/steipete/summarize/pull/239","https://github.com/steipete/summarize/commit/3c5522440c4833dde033e226baa39e6dda1dfc75","https://www.vulncheck.com/advisories/summarize-ssrf-via-podcast-transcript-url-fetch"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-36308","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"Jun 11, 2026, 7:17:19 PM","dateUpdated":"Oct 8, 2026, 3:23:11 PM"},"relatedAdvisories":[],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2026-36308","identifiers":["EUVD-2026-36308","CVE-2026-53782","GHSA-3vx2-vqx8-jxfg"]},"retained":false,"historicalAffected":[]}],"coverage":[]}