glean vulnerabilities

1 known vulnerability in glean from LeslieLeung. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.7 High severity

  glean: Server-Side Request Forgery

  CVE-2026-54339Sep 17, 2026LeslieLeung

  Glean is a self-hosted RSS reader and personal knowledge management tool. Prior to 0.2.6, POST /api/feeds/discover passes an attacker-supplied feed_url to discover_feed(feed_url), creates a subscription through FeedService.create_subscription(), and enqueues f