CVE-2026-53782
1 advisory.
npm/@steipete/summarize CVE-2026-53782: high 7.4, EPSS 0.46%
@steipete/summarize vulnerable to SSRF via podcast:transcript URL fetch
Action: Upgrade @steipete/summarize to 0.17.0 or later.
npm i @steipete/summarize@0.17.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.17.0 | - |
Fixed versions
| 0.17.0 |
Sources
- osv: GHSA-3vx2-vqx8-jxfg
- https://nvd.nist.gov/vuln/detail/CVE-2026-53782
- https://github.com/steipete/summarize/pull/239
- https://github.com/steipete/summarize/commit/3c5522440c4833dde033e226baa39e6dda1dfc75
- https://github.com/steipete/summarize
- https://github.com/steipete/summarize/releases/tag/v0.17.0
- https://www.vulncheck.com/advisories/summarize-ssrf-via-podcast-transcript-url-fetch
CVE-2026-53782 · published · modified · JSON