CVE-2026-120416 in newspaper4k
Prediction
by VulDB Data Team • 11/02/2026
A security vulnerability has been detected in <a href="/product/andyfactory:newspaper4k">AndyFactory newspaper4k up to 0.9.6</a>. This affects the function <code>Article.parse</code> of the file <em>newspaper/extractors/image_extractor.py</em> of the component <em>Image Extractor</em>. Such manipulation leads to server-side request forgery. It is possible to launch the attack remotely. Upgrading to version 0.9.6.1 mitigates this issue. The name of the patch is <em>eec5fab21897c14667c98f5ba1831ebd3a692dd4</em>. Upgrading the affected component is advised. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.