# Server-side request forgery (SSRF).

The server made to send requests an attacker chooses. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Ech0 has Unauthenticated Server-Side Request Forgery in Website Preview Feature](https://agentprime.io/advisories/GHSA-wc4h-2348-jc3p.md)
  `GHSA-wc4h-2348-jc3p`, `CVE-2026-35036`, `GO-2026-5704` · Go `github.com/lin-snow/ech0`: affected `<1.4.8-0.20260401031029-4ca56fea5ba4`, fixed in `1.4.8-0.20260401031029-4ca56fea5ba4` · CVSS 7.5 High · Not analysed yet · Published 3 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Azure Custom Locations Resource Provider (RP) Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-26135.md)
  `CVE-2026-26135` · CVE record: Microsoft Azure Custom Locations Resource Provider · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Azure Databricks Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-33107.md)
  `CVE-2026-33107` · CVE record: Microsoft Azure Databricks · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [OpenClaw: SSRF via Unguarded \`fetch()\` in Marketplace Plugin Download and Ollama Model Discovery](https://agentprime.io/advisories/GHSA-9q7v-8mr7-g23p.md)
  `GHSA-9q7v-8mr7-g23p`, `CVE-2026-41302` · npm `openclaw`: affected `<2026.3.31`, fixed in `2026.3.31` · CVSS 4.8 Medium · Not analysed yet · Published 2 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [appsmithorg appsmith Dashboard WebClientUtils.java computeDisallowedHosts server-side request forgery](https://agentprime.io/advisories/CVE-2026-5418.md)
  `CVE-2026-5418` · CVE record: appsmithorg appsmith · CVSS 6.9 Medium · Not analysed yet · Published 2 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Dataease SQLbot Elasticsearch es_engine.py get_es_data_by_http server-side request forgery](https://agentprime.io/advisories/CVE-2026-5417.md)
  `CVE-2026-5417` · CVE record: Dataease SQLbot · CVSS 5.1 Medium · Not analysed yet · Published 2 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Postiz: SSRF via Webhook Creation Endpoint Missing URL Safety Validation](https://agentprime.io/advisories/CVE-2026-34590.md)
  `CVE-2026-34590` · CVE record: gitroomhq postiz-app · CVSS 5.4 Medium · Not analysed yet · Published 2 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Postiz: Unauthenticated Full-Read SSRF via /public/stream Endpoint with Trivially Bypassable Extension Check](https://agentprime.io/advisories/CVE-2026-34577.md)
  `CVE-2026-34577` · CVE record: gitroomhq postiz-app · CVSS 8.6 High · Not analysed yet · Published 2 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Postiz: SSRF in upload-from-url endpoint allows fetching internal resources and cloud metadata](https://agentprime.io/advisories/CVE-2026-34576.md)
  `CVE-2026-34576` · CVE record: gitroomhq postiz-app · CVSS 8.3 High · Not analysed yet · Published 2 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [huimeicloud hm_editor image-to-base64 Endpoint mcp-server.js client.get server-side request forgery](https://agentprime.io/advisories/CVE-2026-5346.md)
  `CVE-2026-5346` · CVE record: huimeicloud hm_editor · CVSS 6.9 Medium · Not analysed yet · Published 2 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [a11y-mcp: Server-Side Request Forgery (SSRF) vulnerability in A11yServer function](https://agentprime.io/advisories/GHSA-prmx-7v35-7q82.md)
  `GHSA-prmx-7v35-7q82`, `CVE-2026-5323` · npm `a11y-mcp`: affected `<1.0.5`, fixed in `1.0.5` · CVSS 4.8 Medium · Not analysed yet · Published 2 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Webmention <= 5.6.2 - Unauthenticated Blind Server-Side Request Forgery](https://agentprime.io/advisories/CVE-2026-0686.md)
  `CVE-2026-0686` · CVE record: pfefferle Webmention · CVSS 7.2 High · Not analysed yet · Published 2 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Webmention <= 5.6.2 - Authenticated (Subscriber+) Server-Side Request Forgery](https://agentprime.io/advisories/CVE-2026-0688.md)
  `CVE-2026-0688` · CVE record: pfefferle Webmention · CVSS 6.4 Medium · Not analysed yet · Published 2 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [PraisonAI Has SSRF in FileTools.download_file() via Unvalidated URL](https://agentprime.io/advisories/GHSA-44c2-3rw4-5gvh.md)
  `GHSA-44c2-3rw4-5gvh`, `CVE-2026-34954`, `PYSEC-2026-2940` · PyPI `praisonaiagents`: affected `<1.5.95`, fixed in `1.5.95` · CVSS 8.6 High · Not analysed yet · Published 1 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [PraisonAI: SSRF via Unvalidated api_base in passthrough() Fallback](https://agentprime.io/advisories/GHSA-x6m9-gxvr-7jpv.md)
  `GHSA-x6m9-gxvr-7jpv`, `CVE-2026-34936`, `PYSEC-2026-2924` · PyPI `praisonai`: affected `<4.5.90`, fixed in `4.5.90` · CVSS 7.7 High · Not analysed yet · Published 1 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [SillyTavern: Incomplete IP validation in /api/search/visit allows SSRF via localhost and IPv6](https://agentprime.io/advisories/GHSA-wm7j-m6jm-8797.md)
  `GHSA-wm7j-m6jm-8797`, `CVE-2026-34526` · npm `sillytavern`: affected `<1.17.0`, fixed in `1.17.0` · CVSS 5.0 Medium · Not analysed yet · Published 1 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [AIOHTTP affected by UNC SSRF/NTLMv2 Credential Theft/Local File Read in static resource handler on Windows](https://agentprime.io/advisories/GHSA-p998-jp59-783m.md)
  `GHSA-p998-jp59-783m`, `CVE-2026-34515`, `PYSEC-2026-2097` · PyPI `aiohttp`: affected `<3.13.4`, fixed in `3.13.4` · CVSS 6.6 Medium · Not analysed yet · Published 1 Apr 2026 · Tags: Path traversal, Server-side request forgery (SSRF)
- [Payload has Authenticated SSRF via Upload Functionality](https://agentprime.io/advisories/GHSA-6r7f-q7f5-wpx8.md)
  `GHSA-6r7f-q7f5-wpx8`, `CVE-2026-34746` · npm `payload`: affected `<3.79.1`, fixed in `3.79.1` · CVSS 7.7 High · Not analysed yet · Published 1 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [AVideo: Stored SSRF via Video EPG Link Missing isSSRFSafeURL() Validation](https://agentprime.io/advisories/GHSA-x5vx-vrpf-r45f.md)
  `GHSA-x5vx-vrpf-r45f`, `CVE-2026-34740`, `PKSA-v4v4-994j-g46x` · Packagist `wwbn/avideo`: affected `<=26.0`, no fixed version yet · CVSS 6.5 Medium · Not analysed yet · Published 1 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Cisco Nexus Dashboard Server Side Request Forgery Vulnerability](https://agentprime.io/advisories/CVE-2026-20041.md)
  `CVE-2026-20041` · CVE record: Cisco Cisco Nexus Dashboard and 1 more · CVSS 6.1 Medium · Not analysed yet · Published 1 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in Devolutions Server](https://agentprime.io/advisories/CVE-2026-4989.md)
  `CVE-2026-4989` · CVE record: Devolutions Server · CVSS 4.3 Medium · Not analysed yet · Published 1 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in M-Files Corporation M-Files Server](https://agentprime.io/advisories/CVE-2026-0932.md)
  `CVE-2026-0932` · CVE record: M-Files Corporation M-Files Server · CVSS 6.9 Medium · Not analysed yet · Published 1 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [AutohomeCorp frostmourne Alarm Preview AlarmController.java server-side request forgery](https://agentprime.io/advisories/CVE-2026-5259.md)
  `CVE-2026-5259` · CVE record: AutohomeCorp frostmourne · CVSS 5.3 Medium · Not analysed yet · Published 1 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [OpenClaw affected by SSRF via unguarded image download in fal provider](https://agentprime.io/advisories/GHSA-qxgf-hmcj-3xw3.md)
  `GHSA-qxgf-hmcj-3xw3`, `CVE-2026-34504` · npm `openclaw`: affected `<2026.3.28`, fixed in `2026.3.28` · CVSS 6.9 Medium · Not analysed yet · Published 1 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [OpenClaw SSRF guard misses four IPv6 special-use ranges](https://agentprime.io/advisories/GHSA-g86v-f9qv-rh6m.md)
  `GHSA-g86v-f9qv-rh6m`, `CVE-2026-41361` · npm `openclaw`: affected `<2026.3.28`, fixed in `2026.3.28` · CVSS 5.1 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: Server-side request forgery (SSRF), CWE-184
- [Nuxt OG Image vulnerable to Server-Side Request Forgery via user-controlled parameters](https://agentprime.io/advisories/GHSA-pqhr-mp3f-hrpp.md)
  `GHSA-pqhr-mp3f-hrpp` · npm `nuxt-og-image`: affected `<6.2.5`, fixed in `6.2.5` · CVSS 5.3 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability](https://agentprime.io/advisories/GHSA-vv7q-7jx5-f767.md)
  `GHSA-vv7q-7jx5-f767`, `CVE-2026-32871`, `PYSEC-2026-338` · PyPI `fastmcp`: affected `<3.2.0`, fixed in `3.2.0` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [FreeScout: SSRF protection bypass via broken CIDR check in checkIpByMask()](https://agentprime.io/advisories/CVE-2026-34443.md)
  `CVE-2026-34443` · CVE record: freescout-help-desk freescout · CVSS 6.9 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [InvoiceShelf: SSRF in Invoice PDF Rendering via Unsanitised HTML in Notes Field](https://agentprime.io/advisories/CVE-2026-34367.md)
  `CVE-2026-34367` · CVE record: InvoiceShelf InvoiceShelf · CVSS 7.6 High · Not analysed yet · Published 31 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [InvoiceShelf: SSRF in Payment Receipt PDF Rendering via Unsanitised HTML in Notes Field](https://agentprime.io/advisories/CVE-2026-34366.md)
  `CVE-2026-34366` · CVE record: InvoiceShelf InvoiceShelf · CVSS 7.6 High · Not analysed yet · Published 31 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [InvoiceShelf: SSRF in Estimate PDF Rendering via Unsanitised HTML in Notes Field](https://agentprime.io/advisories/CVE-2026-34365.md)
  `CVE-2026-34365` · CVE record: InvoiceShelf InvoiceShelf · CVSS 7.6 High · Not analysed yet · Published 31 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [Discourse: Group SMTP test endpoint susceptible to SSRF](https://agentprime.io/advisories/CVE-2026-33185.md)
  `CVE-2026-33185` · CVE record: discourse discourse · CVSS 5.3 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [chatwoot Webhook API trigger.rb Trigger server-side request forgery](https://agentprime.io/advisories/CVE-2026-5205.md)
  `CVE-2026-5205` · CVE record: chatwoot · CVSS 5.3 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [Duplicate Advisory: OpenClaw affected by SSRF via unguarded image download in fal provider](https://agentprime.io/advisories/GHSA-35cq-wv6v-88xf.md)
  `GHSA-35cq-wv6v-88xf` · npm `openclaw`: affected `<2026.3.28`, fixed in `2026.3.28` · CVSS 5.3 Medium · Withdrawn · Not analysed yet · Published 31 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [FastGPT: Unauthenticated SSRF via httpTools Endpoint Leads to Internal API Key Theft](https://agentprime.io/advisories/CVE-2026-34162.md)
  `CVE-2026-34162` · CVE record: labring FastGPT · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Mar 2026 · Tags: Authentication bypass, Server-side request forgery (SSRF)
- [Server-Side Request Forgery via MCP Tools Endpoint in FastGPT](https://agentprime.io/advisories/CVE-2026-34163.md)
  `CVE-2026-34163` · CVE record: labring FastGPT · CVSS 7.7 High · Not analysed yet · Published 31 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [OpenStack Glance is affected by Server-Side Request Forgery (SSRF)](https://agentprime.io/advisories/GHSA-mc26-q38v-83gv.md)
  `GHSA-mc26-q38v-83gv`, `CVE-2026-34881`, `PYSEC-2026-2492` · PyPI `glance`: affected `<29.2.0 || >=30.0.0, <30.2.0 || >=31.0.0, <31.1.0`, fixed in `29.2.0`, `30.2.0`, `31.1.0` · CVSS 5.0 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [Performance Monitor <= 1.0.6 - Unauthenticated Blind SSRF](https://agentprime.io/advisories/CVE-2026-3881.md)
  `CVE-2026-3881` · CVE record: Unknown Performance Monitor · CVSS 5.8 Medium · Not analysed yet · Published 31 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [Duplicate Advisory: Kyverno is vulnerable to server-side request forgery (SSRF)](https://agentprime.io/advisories/GHSA-qqrv-2hch-83q4.md)
  `GHSA-qqrv-2hch-83q4` · Go `github.com/kyverno/kyverno`: affected `>=1.16.0, <=1.17.1`, no fixed version yet · CVSS 4.0, no score published · Withdrawn · Not analysed yet · Published 30 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [Tautulli: Unauthenticated pms_image_proxy endpoint proxies arbitrary HTTP requests through the Plex Media Server](https://agentprime.io/advisories/CVE-2026-31804.md)
  `CVE-2026-31804` · CVE record: Tautulli Tautulli · CVSS 4.0 Medium · Not analysed yet · Published 30 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [SourceCodester RSS Feed Parser file_get_contents server-side request forgery](https://agentprime.io/advisories/CVE-2026-5126.md)
  `CVE-2026-5126` · CVE record: SourceCodester RSS Feed Parser · CVSS 5.3 Medium · Not analysed yet · Published 30 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [FHIR Validator: Unauthenticated Blind SSRF via /loadIG Endpoint Enables Internal Network Probing](https://agentprime.io/advisories/GHSA-3ww8-jw56-9f5h.md)
  `GHSA-3ww8-jw56-9f5h`, `CVE-2026-34360` · Maven `ca.uhn.hapi.fhir:org.hl7.fhir.core`: affected `<6.9.4`, fixed in `6.9.4` · CVSS 5.8 Medium · Not analysed yet · Published 30 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [Docker Model Runner OCI Registry Client Vulnerable to Server-Side Request Forgery (SSRF)](https://agentprime.io/advisories/GHSA-x2f5-332j-9xwq.md)
  `GHSA-x2f5-332j-9xwq`, `CVE-2026-33990`, `GO-2026-4911` · Go `github.com/docker/model-runner`: affected `<1.1.25`, fixed in `1.1.25` · CVSS 6.8 Medium · Not analysed yet · Published 30 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [Gotenberg has Chromium deny-list bypass via case-insensitive URL scheme (bypass of GHSA-rh2x-ccvw-q7r3)](https://agentprime.io/advisories/GHSA-jjwv-57xh-xr6r.md)
  `GHSA-jjwv-57xh-xr6r`, `CVE-2026-27018`, `GO-2026-4905` · Go `github.com/gotenberg/gotenberg/v7` and 1 more: affected `<=7.10.2`, no fixed version yet · CVSS 7.8 High · Not analysed yet · Published 30 Mar 2026 · Tags: Path traversal, Server-side request forgery (SSRF)
- [In KubePlus 4.1.4, the mutating webhook and kubeconfiggenerator components have an SSRF vulnerability when processing the chartURL field of ResourceComposition resources.](https://agentprime.io/advisories/CVE-2026-29954.md)
  `CVE-2026-29954` · CVE record · CVSS 7.6 High · Not analysed yet · Published 30 Mar 2026 · Tags: Command injection, Server-side request forgery (SSRF)
- [Invoice Ninja v5.12.46 and v5.12.48 is vulnerable to Server-Side Request Forgery (SSRF) in CheckDatabaseRequest.php.](https://agentprime.io/advisories/CVE-2026-29925.md)
  `CVE-2026-29925` · CVE record · CVSS 7.7 High · Not analysed yet · Published 30 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [A Server-Side Request Forgery (SSRF) vulnerability exists in parisneo/lollms versions prior to 2.2.0, specifically in the \`/api/files/export-content\` endpoint. The \`\_download_image_to_temp()\` funct...](https://agentprime.io/advisories/PYSEC-2026-2199.md)
  `PYSEC-2026-2199`, `CVE-2026-0560` · PyPI `lollms`: affected `<2.1.1`, fixed in `2.1.1` · CVSS 7.5 High · Not analysed yet · Published 29 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [OpenClaw: SSRF via Unguarded Configured Base URLs in Multiple Channel Extensions (Incomplete Fix for CVE-2026-28476)](https://agentprime.io/advisories/GHSA-rhfg-j8jq-7v2h.md)
  `GHSA-rhfg-j8jq-7v2h`, `CVE-2026-35629` · npm `openclaw`: affected `<2026.3.28`, fixed in `2026.3.28` · CVSS 5.3 Medium · Not analysed yet · Published 29 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [elecV2 elecV2P URL mock eAxios server-side request forgery](https://agentprime.io/advisories/CVE-2026-5016.md)
  `CVE-2026-5016` · CVE record: elecV2 elecV2P · CVSS 6.9 Medium · Not analysed yet · Published 28 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [Oxygen <= 6.0.8 - Unauthenticated Server-Side Request Forgery via route_path](https://agentprime.io/advisories/CVE-2025-12886.md)
  `CVE-2025-12886` · CVE record: Laborator Oxygen - WooCommerce WordPress Theme · CVSS 7.2 High · Not analysed yet · Published 28 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [LinkAce's SSRF protection can be bypassed via internal hostname resolution in LinkAce](https://agentprime.io/advisories/CVE-2026-33953.md)
  `CVE-2026-33953` · CVE record: Kovah LinkAce · CVSS 8.5 High · Not analysed yet · Published 27 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [Clerk: SSRF in the opt-in clerkFrontendApiProxy feature may leak secret keys to unintended host](https://agentprime.io/advisories/GHSA-gjxx-92w9-8v8f.md)
  `GHSA-gjxx-92w9-8v8f`, `CVE-2026-34076` · npm `@clerk/backend` and 3 more: affected `>=3.0.0, <3.2.3`, fixed in `3.2.3` · CVSS 7.4 High · Not analysed yet · Published 27 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [LibreChat Server-Side Request Forgery using DNS resolution](https://agentprime.io/advisories/CVE-2026-31945.md)
  `CVE-2026-31945` · CVE record: danny-avila LibreChat · CVSS 7.7 High · Not analysed yet · Published 27 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [LibreChat has SSRF protection bypass via IPv4-mapped IPv6 normalization in isPrivateIP](https://agentprime.io/advisories/CVE-2026-31943.md)
  `CVE-2026-31943` · CVE record: danny-avila LibreChat · CVSS 8.5 High · Not analysed yet · Published 27 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [letta-ai letta File URL message_helper.py \_convert_message_create_to_message server-side request forgery](https://agentprime.io/advisories/CVE-2026-4964.md)
  `CVE-2026-4964` · CVE record: letta-ai letta · CVSS 5.3 Medium · Not analysed yet · Published 27 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [Postiz has Multiple SSRF Vectors - Webhooks, RSS Feed, URL Loader](https://agentprime.io/advisories/GHSA-89v5-38xr-9m4j.md)
  `GHSA-89v5-38xr-9m4j` · npm `postiz`: affected `<=2.0.12`, no fixed version yet · CVSS 4.0, no score published · Not analysed yet · Published 27 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [Postiz App has a High-Severity SSRF Vulnerability via Next.js](https://agentprime.io/advisories/GHSA-vj2p-7pgw-g2wf.md)
  `GHSA-vj2p-7pgw-g2wf` · npm `postiz`: affected `<=2.0.12`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 27 Mar 2026 · Tags: Server-side request forgery (SSRF), CWE-1395
- [mingSoft MCMS Editor Endpoint BaseAction.java catchImage server-side request forgery](https://agentprime.io/advisories/CVE-2026-4953.md)
  `CVE-2026-4953` · CVE record: mingSoft MCMS · CVSS 6.9 Medium · Not analysed yet · Published 27 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [calibre has Server-Side Request Forgery in ebook viewer backend](https://agentprime.io/advisories/CVE-2026-33205.md)
  `CVE-2026-33205` · CVE record: kovidgoyal calibre · CVSS 4.8 Medium · Not analysed yet · Published 27 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [Spring AI: Insufficient Validation causes SSRF when processing multimodal messages with user-supplied URLs](https://agentprime.io/advisories/GHSA-mhrg-94vw-45c5.md)
  `GHSA-mhrg-94vw-45c5`, `CVE-2026-22742` · Maven `org.springframework.ai:spring-ai-bedrock-converse`: affected `>=1.0.0-M5, <1.0.5 || >=1.1.0-M1, <1.1.4`, fixed in `1.0.5`, `1.1.4` · CVSS 8.6 High · Not analysed yet · Published 27 Mar 2026 · Tags: Server-side request forgery (SSRF)

Newest: <https://agentprime.io/advisories/tag/ssrf.md>
Older: <https://agentprime.io/advisories/tag/ssrf.md?cursor=WyIyMDI2LTAzLTI3VDA2OjMxOjQzLjAwMDAwMFoiLCJHSFNBLW1ocmctOTR2dy00NWM1Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=ssrf&cursor=WyIyMDI2LTA0LTAzVDAzOjMzOjAwLjAwMDAwMFoiLCJHSFNBLWNxZ2YtZjR4Ny1nNndjIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/ssrf/?cursor=WyIyMDI2LTA0LTAzVDAzOjMzOjAwLjAwMDAwMFoiLCJHSFNBLWNxZ2YtZjR4Ny1nNndjIl0>. Everything for agents: <https://agentprime.io/llms.txt>.