# Server-side request forgery (SSRF).

The server made to send requests an attacker chooses. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [FlowiseAI/Flowise has Server-Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/GHSA-hr92-4q35-4j3m.md)
  `GHSA-hr92-4q35-4j3m`, `CVE-2025-59527` · npm `flowise`: affected `>=3.0.5, <3.0.6`, fixed in `3.0.6` · CVSS 7.5 High · Not analysed yet · Published 15 Sept 2025 · Tags: Server-side request forgery (SSRF)
- [ZKEACMS MediaController.cs Proxy server-side request forgery](https://agentprime.io/advisories/CVE-2025-10471.md)
  `CVE-2025-10471` · CVE record: ZKEACMS · CVSS 5.3 Medium · Not analysed yet · Published 15 Sept 2025 · Tags: Server-side request forgery (SSRF)
- [Dataease server-side request forgery via unfiltered DB2 JDBC ldap parameter](https://agentprime.io/advisories/CVE-2025-58045.md)
  `CVE-2025-58045` · CVE record: dataease dataease · CVSS 7.1 High · Not analysed yet · Published 15 Sept 2025 · Tags: Server-side request forgery (SSRF)
- [PilotGaea Technologies｜O'View MapServer - Server-Side Request Forgery](https://agentprime.io/advisories/CVE-2025-10453.md)
  `CVE-2025-10453` · CVE record: PilotGaea Technologies O'View MapServer · CVSS 6.9 Medium · Not analysed yet · Published 15 Sept 2025 · Tags: Server-side request forgery (SSRF)
- [SourceCodester Link Status Checker index.php server-side request forgery](https://agentprime.io/advisories/CVE-2025-10410.md)
  `CVE-2025-10410` · CVE record: SourceCodester Link Status Checker · CVSS 5.3 Medium · Not analysed yet · Published 14 Sept 2025 · Tags: Server-side request forgery (SSRF)
- [Magicblack MacCMS API server-side request forgery](https://agentprime.io/advisories/CVE-2025-10397.md)
  `CVE-2025-10397` · CVE record: Magicblack MacCMS · CVSS 5.1 Medium · Not analysed yet · Published 14 Sept 2025 · Tags: Server-side request forgery (SSRF)
- [Magicblack MacCMS Scheduled Task col_url server-side request forgery](https://agentprime.io/advisories/CVE-2025-10395.md)
  `CVE-2025-10395` · CVE record: Magicblack MacCMS · CVSS 5.1 Medium · Not analysed yet · Published 14 Sept 2025 · Tags: Server-side request forgery (SSRF)
- [miurla morphic HTTP Status Code 3xx advanced-search fetchHtml server-side request forgery](https://agentprime.io/advisories/CVE-2025-10393.md)
  `CVE-2025-10393` · CVE record: miurla morphic · CVSS 5.3 Medium · Not analysed yet · Published 14 Sept 2025 · Tags: Server-side request forgery (SSRF)
- [CRMEB OutAccountServices.php testOutUrl server-side request forgery](https://agentprime.io/advisories/CVE-2025-10391.md)
  `CVE-2025-10391` · CVE record: CRMEB · CVSS 5.3 Medium · Not analysed yet · Published 14 Sept 2025 · Tags: Server-side request forgery (SSRF)
- [cdevroe unmark Marks.php server-side request forgery](https://agentprime.io/advisories/CVE-2025-10329.md)
  `CVE-2025-10329` · CVE record: cdevroe unmark · CVSS 5.3 Medium · Not analysed yet · Published 12 Sept 2025 · Tags: Server-side request forgery (SSRF)
- [Server-Side Request Forgery (SSRF) in GitLab](https://agentprime.io/advisories/CVE-2025-6454.md)
  `CVE-2025-6454` · CVE record: GitLab GitLab · CVSS 8.5 High · Not analysed yet · Published 12 Sept 2025 · Tags: Server-side request forgery (SSRF)
- [InstantCMS vulnerable to Server-Side Request Forgery via package installer](https://agentprime.io/advisories/CVE-2025-59055.md)
  `CVE-2025-59055` · CVE record: instantsoft icms2 · CVSS 4.7 Medium · Not analysed yet · Published 11 Sept 2025 · Tags: Server-side request forgery (SSRF)
- [yanyutao0402 ChanCMS getArticle CollectController server-side request forgery](https://agentprime.io/advisories/CVE-2025-10211.md)
  `CVE-2025-10211` · CVE record: yanyutao0402 ChanCMS · CVSS 5.3 Medium · Not analysed yet · Published 10 Sept 2025 · Tags: Server-side request forgery (SSRF)
- [Auto Save Remote Images (Drafts) <= 1.0.9 - Authenticated (Contributor+) Server-Side Request Forgery](https://agentprime.io/advisories/CVE-2025-7843.md)
  `CVE-2025-7843` · CVE record: fernandiez Auto Save Remote Images (Drafts) · CVSS 6.4 Medium · Not analysed yet · Published 10 Sept 2025 · Tags: Server-side request forgery (SSRF)
- [Server-Side Request Forgery (SSRF) vulnerability found in embedded web server](https://agentprime.io/advisories/CVE-2025-9269.md)
  `CVE-2025-9269` · CVE record: Lexmark CX, XC, CS, MS, MX, XM, et. al. · CVSS 6.9 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: Server-side request forgery (SSRF)
- [Adobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918)](https://agentprime.io/advisories/CVE-2025-54249.md)
  `CVE-2025-54249` · CVE record: Adobe Adobe Experience Manager · CVSS 6.5 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: Server-side request forgery (SSRF)
- [WordPress WP eBay Product Feeds Plugin <= 3.4.8 - Server Side Request Forgery (SSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58977.md)
  `CVE-2025-58977` · CVE record: Rhys Wynne WP eBay Product Feeds · CVSS 4.9 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: Server-side request forgery (SSRF)
- [Shanghai Lingdang Information Technology Lingdang CRM index_event.php server-side request forgery](https://agentprime.io/advisories/CVE-2025-5005.md)
  `CVE-2025-5005` · CVE record: Shanghai Lingdang Information Technology Lingdang CRM · CVSS 6.9 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: Server-side request forgery (SSRF)
- [WordPress Ultimate Video Player Plugin <= 10.1 - Server Side Request Forgery (SSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-49430.md)
  `CVE-2025-49430` · CVE record: FWDesign Ultimate Video Player · CVSS 7.2 High · Not analysed yet · Published 9 Sept 2025 · Tags: Server-side request forgery (SSRF)
- [WordPress LiteSpeed Cache plugin <= 7.0.1 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-47437.md)
  `CVE-2025-47437` · CVE record: LiteSpeed Technologies LiteSpeed Cache · CVSS 6.4 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in Ivanti Connect Secure and others](https://agentprime.io/advisories/CVE-2025-55139.md)
  `CVE-2025-55139` · CVE record: Ivanti Connect Secure and 3 more · CVSS 6.8 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: Server-side request forgery (SSRF)
- [Liferay Portal is vulnerable to SSRF through custom object attachment fields](https://agentprime.io/advisories/GHSA-477q-x55m-j38g.md)
  `GHSA-477q-x55m-j38g`, `CVE-2025-43763` · Maven `com.liferay:com.liferay.object.service`: affected `<1.0.208`, fixed in `1.0.208` · CVSS 4.8 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: Server-side request forgery (SSRF)
- [halo v2.20.17 and before is vulnerable to server-side request forgery (SSRF) in /apis/uc.api.storage.halo.run/v1alpha1/attachments/-/upload-from-url.](https://agentprime.io/advisories/CVE-2025-44594.md)
  `CVE-2025-44594` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2025 · Tags: Server-side request forgery (SSRF)
- [SimStudioAI sim route.ts server-side request forgery](https://agentprime.io/advisories/CVE-2025-10096.md)
  `CVE-2025-10096` · CVE record: SimStudioAI sim · CVSS 5.3 Medium · Not analysed yet · Published 8 Sept 2025 · Tags: Server-side request forgery (SSRF)
- [WordPress Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One plugin <= 2.3.3 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-58829.md)
  `CVE-2025-58829` · CVE record: aitool Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One · CVSS 4.9 Medium · Not analysed yet · Published 5 Sept 2025 · Tags: Server-side request forgery (SSRF)
- [Server-Side Request Forgery via /\_image endpoint in Astro Cloudflare adapter](https://agentprime.io/advisories/GHSA-qpr4-c339-7vq8.md)
  `GHSA-qpr4-c339-7vq8`, `CVE-2025-58179` · npm `@astrojs/cloudflare`: affected `>=11.0.3, <12.6.6`, fixed in `12.6.6` · CVSS 7.2 High · Not analysed yet · Published 4 Sept 2025 · Tags: Server-side request forgery (SSRF)
- [Mautic vulnerable to SSRF via webhook function](https://agentprime.io/advisories/GHSA-hj6f-7hp7-xg69.md)
  `GHSA-hj6f-7hp7-xg69`, `CVE-2025-9821`, `PKSA-1vkq-hh1n-xfrh` · Packagist `mautic/core`: affected `>=4.4.0, <4.4.17 || >=5.0.0-alpha, <5.2.8 || >=6.0.0-alpha, <6.0.5`, fixed in `4.4.17`, `5.2.8`, `6.0.5` · CVSS 2.7 Low · Not analysed yet · Published 3 Sept 2025 · Tags: Server-side request forgery (SSRF)
- [WordPress Exit Intent Popup Plugin <= 1.0.1 - Server Side Request Forgery (SSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58641.md)
  `CVE-2025-58641` · CVE record: kamleshyadav Exit Intent Popup · CVSS 5.4 Medium · Not analysed yet · Published 3 Sept 2025 · Tags: Server-side request forgery (SSRF)
- [WordPress WP Bannerize Pro Plugin <= 1.10.0 - Server Side Request Forgery (SSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58615.md)
  `CVE-2025-58615` · CVE record: gfazioli WP Bannerize Pro · CVSS 4.4 Medium · Not analysed yet · Published 3 Sept 2025 · Tags: Server-side request forgery (SSRF)
- [SimStudioAI sim route.ts server-side request forgery](https://agentprime.io/advisories/CVE-2025-9805.md)
  `CVE-2025-9805` · CVE record: SimStudioAI sim · CVSS 5.3 Medium · Not analysed yet · Published 2 Sept 2025 · Tags: Server-side request forgery (SSRF)
- [Langfuse Webhook promptRouter.ts promptChangeEventSourcing server-side request forgery](https://agentprime.io/advisories/CVE-2025-9799.md)
  `CVE-2025-9799` · CVE record: Langfuse · CVSS 2.3 Low · Not analysed yet · Published 1 Sept 2025 · Tags: Server-side request forgery (SSRF)
- [Knowage vulnerable to server-side request forgery](https://agentprime.io/advisories/CVE-2025-55007.md)
  `CVE-2025-55007` · CVE record: KnowageLabs Knowage-Server · CVSS 3.5 Low · Not analysed yet · Published 1 Sept 2025 · Tags: Server-side request forgery (SSRF)
- [Next.js Improper Middleware Redirect Handling Leads to SSRF](https://agentprime.io/advisories/GHSA-4342-x723-ch2f.md)
  `GHSA-4342-x723-ch2f`, `CVE-2025-57822` · npm `next`: affected `>=0.9.9, <14.2.32 || >=15.0.0-canary.0, <15.4.7`, fixed in `14.2.32`, `15.4.7` · CVSS 6.5 Medium · Not analysed yet · Published 29 Aug 2025 · Tags: Server-side request forgery (SSRF)
- [Mattermost Server SSRF Vulnerability via the Agents Plugin in github.com/mattermost/mattermost-server](https://agentprime.io/advisories/GHSA-vqwh-5jhh-vc9p.md)
  `GHSA-vqwh-5jhh-vc9p`, `CVE-2025-47700`, `GO-2025-3906` · Go `github.com/mattermost/mattermost-server` and 3 more: affected `>=10.5.0+incompatible, <10.5.10+incompatible`, fixed in `10.5.10+incompatible` · CVSS 3.5 Low · Not analysed yet · Published 29 Aug 2025 · Tags: Server-side request forgery (SSRF)
- [WordPress Chartbeat Plugin <= 2.0.7 - Server Side Request Forgery (SSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-53250.md)
  `CVE-2025-53250` · CVE record: Chartbeat Chartbeat · CVSS 6.4 Medium · Not analysed yet · Published 28 Aug 2025 · Tags: Server-side request forgery (SSRF)
- [WordPress rajce plugin <= 0.4.2 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-48364.md)
  `CVE-2025-48364` · CVE record: vEnCa-X rajce · CVSS 4.9 Medium · Not analysed yet · Published 28 Aug 2025 · Tags: Server-side request forgery (SSRF)
- [WordPress Solace Extra Plugin <= 1.3.2 - Server Side Request Forgery (SSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-58203.md)
  `CVE-2025-58203` · CVE record: solacewp Solace Extra · CVSS 4.4 Medium · Not analysed yet · Published 27 Aug 2025 · Tags: Server-side request forgery (SSRF)
- [Firecrawl SSRF Vulnerability via malicious webhook](https://agentprime.io/advisories/CVE-2025-57818.md)
  `CVE-2025-57818` · CVE record: firecrawl firecrawl · CVSS 6.3 Medium · Not analysed yet · Published 26 Aug 2025 · Tags: Server-side request forgery (SSRF)
- [request-filtering-agent SSRF Bypass via HTTPS Requests to 127.0.0.1](https://agentprime.io/advisories/GHSA-pw25-c82r-75mm.md)
  `GHSA-pw25-c82r-75mm`, `CVE-2025-57814` · npm `request-filtering-agent`: affected `<2.0.0`, fixed in `2.0.0` · CVSS 5.5 Medium · Not analysed yet · Published 25 Aug 2025 · Tags: Server-side request forgery (SSRF)
- [kalcaddle kodbox Download from Link serverDownload server-side request forgery](https://agentprime.io/advisories/CVE-2025-9414.md)
  `CVE-2025-9414` · CVE record: kalcaddle kodbox · CVSS 5.1 Medium · Not analysed yet · Published 25 Aug 2025 · Tags: Server-side request forgery (SSRF)
- [PhpSpreadsheet vulnerable to SSRF when reading and displaying a processed HTML document in the browser](https://agentprime.io/advisories/GHSA-rx7m-68vc-ppxh.md)
  `GHSA-rx7m-68vc-ppxh`, `CVE-2025-54370`, `PKSA-64jn-3d9t-gncx` · Packagist `phpoffice/phpspreadsheet`: affected `<1.30.0 || >=2.0.0, <2.1.12 || >=2.2.0, <2.4.0 || >=3.0.0, <3.10.0 || >=4.0.0, <5.0.0`, fixed in `1.30.0`, `2.1.12`, `2.4.0`, `3.10.0`, `5.0.0` · CVSS 8.7 High · Not analysed yet · Published 25 Aug 2025 · Tags: Server-side request forgery (SSRF)
- [HuangDou UTCMS Config update.php server-side request forgery](https://agentprime.io/advisories/CVE-2025-9402.md)
  `CVE-2025-9402` · CVE record: HuangDou UTCMS · CVSS 5.1 Medium · Not analysed yet · Published 25 Aug 2025 · Tags: Server-side request forgery (SSRF)
- [Rebuild v3.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the type parameter in the com.rebuild.web.admin.rbstore.RBStoreController#loadDataIndex method.](https://agentprime.io/advisories/CVE-2024-46413.md)
  `CVE-2024-46413` · CVE record · CVSS 5.1 Medium · Not analysed yet · Published 25 Aug 2025 · Tags: Server-side request forgery (SSRF)
- [wangsongyan wblog backup.go RestorePost server-side request forgery](https://agentprime.io/advisories/CVE-2025-9395.md)
  `CVE-2025-9395` · CVE record: wangsongyan wblog · CVSS 5.3 Medium · Not analysed yet · Published 24 Aug 2025 · Tags: Server-side request forgery (SSRF)
- [Event Manager, Events Calendar, Booking, Registrations and Tickets – Eventin <= 4.0.37 - Unauthenticated Server-Side Request Forgery](https://agentprime.io/advisories/CVE-2025-7813.md)
  `CVE-2025-7813` · CVE record: arraytics Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) · CVSS 7.2 High · Not analysed yet · Published 23 Aug 2025 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in Liferay DXP](https://agentprime.io/advisories/CVE-2025-43747.md)
  `CVE-2025-43747` · CVE record: Liferay DXP · CVSS 4.8 Medium · Not analysed yet · Published 21 Aug 2025 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in Ubiquiti Inc UISP Application](https://agentprime.io/advisories/CVE-2025-27217.md)
  `CVE-2025-27217` · CVE record: Ubiquiti Inc UISP Application · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Aug 2025 · Tags: Server-side request forgery (SSRF)
- [IBM Edge Application Manager server-side request forgery](https://agentprime.io/advisories/CVE-2025-1142.md)
  `CVE-2025-1142` · CVE record: IBM Edge Application Manager · CVSS 5.4 Medium · Not analysed yet · Published 20 Aug 2025 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in Schneider Electric EcoStruxure™ Power Monitoring Expert (PME) and others](https://agentprime.io/advisories/CVE-2025-54925.md)
  `CVE-2025-54925` · CVE record: Schneider Electric EcoStruxure™ Power Monitoring Expert (PME) and 1 more · CVSS 7.5 High · Not analysed yet · Published 20 Aug 2025 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in Schneider Electric EcoStruxure™ Power Monitoring Expert (PME) and others](https://agentprime.io/advisories/CVE-2025-54924.md)
  `CVE-2025-54924` · CVE record: Schneider Electric EcoStruxure™ Power Monitoring Expert (PME) and 1 more · CVSS 7.5 High · Not analysed yet · Published 20 Aug 2025 · Tags: Server-side request forgery (SSRF)
- [Apache EventMesh Vulnerable to Server-Side Request Forgery in WebhookUtil.java](https://agentprime.io/advisories/GHSA-hf86-8x8v-h7vc.md)
  `GHSA-hf86-8x8v-h7vc`, `CVE-2024-39954` · Maven `org.apache.eventmesh:eventmesh-runtime`: affected `>=1.6.0-release, <=1.11.0-release`, no fixed version yet · CVSS 6.3 Medium · Not analysed yet · Published 20 Aug 2025 · Tags: Server-side request forgery (SSRF)
- [SSRF in PozitifIK's Pik Online](https://agentprime.io/advisories/CVE-2025-5260.md)
  `CVE-2025-5260` · CVE record: Pik Online Yazılım Çözümleri A.Ş. Pik Online · CVSS 8.6 High · Not analysed yet · Published 20 Aug 2025 · Tags: Server-side request forgery (SSRF)
- [WP Crontrol Authenticated (Administrator+) plugin vulnerable to Blind Server-Side Request Forgery](https://agentprime.io/advisories/GHSA-35c5-67fm-cpcp.md)
  `GHSA-35c5-67fm-cpcp`, `CVE-2025-8678`, `PKSA-s8n8-wvcv-s9wt` · Packagist `johnbillion/wp-crontrol`: affected `>=1.17.0, <1.19.2`, fixed in `1.19.2` · CVSS 5.9 Medium · Not analysed yet · Published 19 Aug 2025 · Tags: Server-side request forgery (SSRF)
- [ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)](https://agentprime.io/advisories/CVE-2025-54234.md)
  `CVE-2025-54234` · CVE record: Adobe ColdFusion · CVSS 2.7 Low · Not analysed yet · Published 18 Aug 2025 · Tags: Server-side request forgery (SSRF)
- [AI SEO Link Advisor - Less critical - Server-side Request Forgery - SA-CONTRIB-2025-095](https://agentprime.io/advisories/CVE-2025-8675.md)
  `CVE-2025-8675` · CVE record: Drupal AI SEO Link Advisor · CVSS 4.7 Medium · Not analysed yet · Published 15 Aug 2025 · Tags: Server-side request forgery (SSRF)
- [Quttera Web Malware Scanner <= 3.5.1.41 - Authenticated (Administrator+) Server-Side Request Forgery](https://agentprime.io/advisories/CVE-2025-8013.md)
  `CVE-2025-8013` · CVE record: quttera Quttera ThreatSign – Web Malware Scanner for WordPress · CVSS 3.8 Low · Not analysed yet · Published 15 Aug 2025 · Tags: Server-side request forgery (SSRF)
- [B Slider - Gutenberg Slider Block for WP <= 2.0.0 - Authenticated (Subscriber+) Server-Side Request Forgery](https://agentprime.io/advisories/CVE-2025-8680.md)
  `CVE-2025-8680` · CVE record: bplugins bSlider – Create Responsive Image, Post, Product, and Video Sliders · CVSS 4.3 Medium · Not analysed yet · Published 15 Aug 2025 · Tags: Server-side request forgery (SSRF)
- [WordPress Simplified plugin <= 1.0.11 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-53241.md)
  `CVE-2025-53241` · CVE record: kodeshpa Simplified · CVSS 5.5 Medium · Not analysed yet · Published 14 Aug 2025 · Tags: Server-side request forgery (SSRF)
- [WordPress PressForward <= 5.9.4 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-28987.md)
  `CVE-2025-28987` · CVE record: PressForward PressForward · CVSS 6.4 Medium · Not analysed yet · Published 14 Aug 2025 · Tags: Server-side request forgery (SSRF)
- [Server side request forgery (SSRF) vulnerability in makeplane plane 0.23.1 via the password recovery.](https://agentprime.io/advisories/CVE-2025-50251.md)
  `CVE-2025-50251` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 13 Aug 2025 · Tags: Server-side request forgery (SSRF)

Newest: <https://agentprime.io/advisories/tag/ssrf.md>
Older: <https://agentprime.io/advisories/tag/ssrf.md?cursor=WyIyMDI1LTA4LTEzVDAwOjAwOjAwLjAwMDAwMFoiLCJDVkUtMjAyNS01MDI1MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=ssrf&cursor=WyIyMDI1LTA5LTE1VDIwOjMxOjE0LjAwMDAwMFoiLCJHSFNBLWY3cWcteGo0NS13OTU2Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/ssrf/?cursor=WyIyMDI1LTA5LTE1VDIwOjMxOjE0LjAwMDAwMFoiLCJHSFNBLWY3cWcteGo0NS13OTU2Il0>. Everything for agents: <https://agentprime.io/llms.txt>.