CVE-2026-120416 | AndyFactory newspaper4k up to 0.9.6 Image Extractor image_extractor.py Article.parse server-side request forgery (Issue 741)

November 2, 2026 Yanac

A vulnerability classified as problematic was found in AndyFactory newspaper4k up to 0.9.6. This affects the function Article.parse of the file newspaper/extractors/image_extractor.py of the component Image Extractor. Such manipulation leads to server-side request forgery.

This vulnerability is referenced as CVE-2026-120416. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.

The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.VulDB Recent EntriesRead More