Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: steipete summarize 0.17.0 Clear all filters
TI-2026-38778 CVE-2026-53782 · GHSA-3vx2-vqx8-jxfg

Summarize < 0.17.0 SSRF via podcast:transcript URL fetch

Priority LOW 28

Summarize before 0.17.0 contains a server-side request forgery vulnerability that allows attackers who control a podcast RSS feed to direct the host to fetch transcript content from loopback addresses, link-local address…

CVSS 4.0MEDIUM 6.3 Network No auth User interaction EPSS 0.00261 Published 2026-06-11 Fixed in 0.17.0 CWE-918
TI-2026-38777 CVE-2026-53781 · GHSA-q9xm-f36c-xm3q

Summarize < 0.17.0 Disk Exhaustion via Uncapped Media Download

Priority LOW 24

Summarize before 0.17.0 contains a resource exhaustion vulnerability that allows remote attackers to cause disk exhaustion by serving media responses that bypass the enforced size limit through missing or misreported Con…

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00324 Published 2026-06-11 Fixed in 0.17.0 CWE-770