CVE-2026-3961 | zyddnys manga-image-translator up to beta-0.3 Translate Endpoints request_extraction.py to_pil_image server-side request forgery (1118/1119/1120/1121/1122/1123/1124)

A vulnerability marked as critical has been reported in zyddnys manga-image-translator up to beta-0.3. The affected element is the function to_pil_image of the file manga-image-translator-main/server/request_extraction.py of the component Translate Endpoints. This manipulation causes server-side request forgery.

The identification of this vulnerability is CVE-2026-3961. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

The project was informed of the problem early through an issue report but has not responded yet.