ByteOS Network

CVE Vulnerability Details :

CVE-2026-3961

PUBLISHED

More Info Official Page

Assigner-VulDB

Assigner Org ID-1af790b2-7ee1-4545-860a-a788eba489b5

Published At-11 Mar, 2026 | 22:02

Updated At-12 Mar, 2026 | 19:26

▼CVE Numbering Authority (CNA)

zyddnys manga-image-translator Translate Endpoints request_extraction.py to_pil_image server-side request forgery

A vulnerability was determined in zyddnys manga-image-translator up to beta-0.3. The affected element is the function to_pil_image of the file manga-image-translator-main/server/request_extraction.py of the component Translate Endpoints. This manipulation causes server-side request forgery. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

Affected Products

Vendor

zyddnys

Product

manga-image-translator

Modules

Translate Endpoints

Versions

Affected

beta-0.0
beta-0.1
beta-0.2
beta-0.3

Problem Types

Type	CWE ID	Description
CWE	CWE-918	Server-Side Request Forgery

Type: CWE

CWE ID: CWE-918

Description: Server-Side Request Forgery

Metrics

Version	Base score	Base severity	Vector
4.0	5.3	MEDIUM	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
3.1	6.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
3.0	6.3	MEDIUM	CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
2.0	6.5	N/A	AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR

Version: 4.0

Base score: 5.3

Base severity: MEDIUM

Vector:

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Version: 3.1

Base score: 6.3

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Version: 3.0

Base score: 6.3

Base severity: MEDIUM

Vector:

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Version: 2.0

Base score: 6.5

Base severity: N/A

Vector:

AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR

Credits

reporter

ZAST.AI (VulDB User)

Timeline

Event	Date
Advisory disclosed	2026-03-11 00:00:00
VulDB entry created	2026-03-11 01:00:00
VulDB entry last update	2026-03-11 13:59:16

Event: Advisory disclosed

Date: 2026-03-11 00:00:00

Event: VulDB entry created

Date: 2026-03-11 01:00:00

Event: VulDB entry last update

Date: 2026-03-11 13:59:16

References

Hyperlink	Resource
https://vuldb.com/?id.350390	vdb-entry technical-description
https://vuldb.com/?ctiid.350390	signature permissions-required
https://vuldb.com/?submit.768180	third-party-advisory
https://vuldb.com/?submit.768210	third-party-advisory
https://vuldb.com/?submit.768211	third-party-advisory
https://vuldb.com/?submit.768212	third-party-advisory
https://vuldb.com/?submit.768214	third-party-advisory
https://vuldb.com/?submit.768224	third-party-advisory
https://vuldb.com/?submit.768225	third-party-advisory
https://github.com/zyddnys/manga-image-translator/issues/1118	issue-tracking
https://github.com/zyddnys/manga-image-translator/issues/1119	exploit issue-tracking
https://github.com/zyddnys/manga-image-translator/	product