CVE-2026-125366 | asciimoo Omnom up to 0.9.0 Feed Submission getFeedInfo/gofeed ParseURL/fetchImageAsInlineURL feed URLs server-side request forgery

A vulnerability classified as critical has been found in asciimoo Omnom up to 0.9.0. This issue affects the function getFeedInfo/gofeed ParseURL/fetchImageAsInlineURL of the component Feed Submission. The manipulation of the argument feed URLs leads to server-side request forgery.

This vulnerability is documented as CVE-2026-125366. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More