VYPR

Glean

by Glean

CVEs (1)

  • CVE-2026-54339HigSep 17, 2026
    risk 0.50cvss 7.7epss

    Glean is a self-hosted RSS reader and personal knowledge management tool. Prior to 0.2.6, POST /api/feeds/discover passes an attacker-supplied feed_url to discover_feed(feed_url), creates a subscription through FeedService.create_subscription(), and enqueues fetch_feed_task. The…