Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was determined in zyddnys manga-image-translator up to beta-0.3. The affected element is the function to_pil_image of the file manga-image-translator-main/server/request_extraction.py of the component Translate Endpoints. This manipulation causes server-side request forgery. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-03-11 | 1 | Disclosure1 |
| 2026-07-14 | 2 | General2 |
`CVE-2026-3961` in `manga-image-translator` is not one SSRF. It is seven public SSRF reports merged into one CVE. That usually means the root problem is shared logic. https://t.co/Bjk8yaXm7j
Post summary
The tweet clarifies that CVE‑2026‑3961 aggregates seven SSRF incidents sharing common logic, providing no PoC, exploit, active exploitation, or patch information.
Security note: `manga-image-translator <= beta-0.3` has seven verified SSRF reports merged into `CVE-2026-3961`. This is a class-level issue, not one missed route check. https://t.co/TlbBsLknJ1
Post summary
A brief disclosure that CVE-2026-3961 involves SSRF vulnerabilities in manga-image-translator <= beta‑0.3, but no further details are provided.
CVE-2026-3961 A vulnerability was determined in zyddnys manga-image-translator up to beta-0.3. The affected element is the function to_pil_image of the file manga-image-translator-ma… https://www.cve.org/CVERecord?id=CVE-2026-3961
Post summary
The post announces the discovery of CVE‑2026‑3961 in the to_pil_image function of zyddnys manga‑image‑translator up to beta‑0.3, highlighting the affected code without providing exploit or mitigation details.