andyfactory vulnerabilities

Products

• newspaper4k 1

Latest andyfactory CVEs

Newest publication first

1. CVE-2026-120416 AndyFactory newspaper4k Image Extractor image_extractor.py Article.parse server-side request forgery

   Published 2026-11-02

   Medium·CVSS 6.9 EPSS 0.32%

   A security vulnerability has been detected in AndyFactory newspaper4k up to 0.9.6. This affects the function Article.parse of the file newspaper/extractors/image_extractor.py of the component Image Extractor. Such manipulation leads to server-side request forgery. It is possible...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.