# Server-side request forgery (SSRF).

The server made to send requests an attacker chooses. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [OpenClaw: Browser tabs action select and close routes bypassed SSRF policy](https://agentprime.io/advisories/GHSA-rj2p-j66c-mgqh.md)
  `GHSA-rj2p-j66c-mgqh`, `CVE-2026-42439` · npm `openclaw`: affected `<2026.4.10`, fixed in `2026.4.10` · CVSS 4.9 Medium · Not analysed yet · Published 17 Apr 2026 · Tags: Broken access control, Server-side request forgery (SSRF)
- [OpenClaw: Browser SSRF policy default allowed private-network navigation](https://agentprime.io/advisories/GHSA-53vx-pmqw-863c.md)
  `GHSA-53vx-pmqw-863c`, `CVE-2026-43527` · npm `openclaw`: affected `<2026.4.14`, fixed in `2026.4.14` · CVSS 6.3 Medium · Not analysed yet · Published 17 Apr 2026 · Tags: Server-side request forgery (SSRF), CWE-1188
- [OpenClaw: Browser SSRF hostname validation could be bypassed by DNS rebinding](https://agentprime.io/advisories/GHSA-xq94-r468-qwgj.md)
  `GHSA-xq94-r468-qwgj`, `CVE-2026-43582` · npm `openclaw`: affected `<2026.4.10`, fixed in `2026.4.10` · CVSS 4.9 Medium · Not analysed yet · Published 17 Apr 2026 · Tags: Race condition, Server-side request forgery (SSRF), CWE-350
- [OpenClaw: QQBot reply media URL handling could trigger SSRF and re-upload fetched bytes](https://agentprime.io/advisories/GHSA-2767-2q9v-9326.md)
  `GHSA-2767-2q9v-9326`, `CVE-2026-43526` · npm `openclaw`: affected `<2026.4.12`, fixed in `2026.4.12` · CVSS 8.3 High · Not analysed yet · Published 17 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [OpenClaw: Browser snapshot and screenshot routes could expose internal page content after navigation](https://agentprime.io/advisories/GHSA-c4qm-58hj-j6pj.md)
  `GHSA-c4qm-58hj-j6pj`, `CVE-2026-42436` · npm `openclaw`: affected `<2026.4.14`, fixed in `2026.4.14` · CVSS 4.9 Medium · Not analysed yet · Published 17 Apr 2026 · Tags: Broken access control, Server-side request forgery (SSRF)
- [OpenHarness SSRF via web_fetch and web_search](https://agentprime.io/advisories/CVE-2026-40516.md)
  `CVE-2026-40516` · CVE record: HKUDS OpenHarness · CVSS 7.8 High · Not analysed yet · Published 17 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Craftql vulnerable to Server-Side Request Forgery](https://agentprime.io/advisories/GHSA-8wmw-prw8-2ggm.md)
  `GHSA-8wmw-prw8-2ggm`, `CVE-2026-31317`, `PKSA-nwgj-1fc9-zj7r` · Packagist `markhuot/craftql`: affected `<=1.3.7`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 17 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [prasathmani TinyFileManager File Upload filemanager.php server-side request forgery](https://agentprime.io/advisories/CVE-2026-6497.md)
  `CVE-2026-6497` · CVE record: prasathmani TinyFileManager · CVSS 5.3 Medium · Not analysed yet · Published 17 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Server-Side Request Forgery in GREENmod](https://agentprime.io/advisories/CVE-2026-5131.md)
  `CVE-2026-5131` · CVE record: Nomios Poland GREENmod · CVSS 6.9 Medium · Not analysed yet · Published 17 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [HashiCorp Vault has Server-Side Request Forgery in ACME Challenge Validation via Attacker-Controlled DNS](https://agentprime.io/advisories/GHSA-8r5m-3f66-qpr3.md)
  `GHSA-8r5m-3f66-qpr3`, `BIT-vault-2026-5052`, `CVE-2026-5052`, `GO-2026-5262` · Go `github.com/hashicorp/vault`: affected `>=1.14.0, <=1.21.4`, no fixed version yet · CVSS 5.3 Medium · Not analysed yet · Published 17 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [langchain-openai: Image token counting SSRF protection can be bypassed via DNS rebinding](https://agentprime.io/advisories/GHSA-r7w7-9xr2-qq2r.md)
  `GHSA-r7w7-9xr2-qq2r`, `CVE-2026-41488`, `PYSEC-2026-76` · PyPI `langchain-openai`: affected `<1.1.14`, fixed in `1.1.14` · CVSS 3.1 Low · Not analysed yet · Published 16 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [LangChain Text Splitters: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass](https://agentprime.io/advisories/GHSA-fv5p-p927-qmxr.md)
  `GHSA-fv5p-p927-qmxr`, `CVE-2026-41481`, `PYSEC-2026-77` · PyPI `langchain-text-splitters`: affected `<1.1.2`, fixed in `1.1.2` · CVSS 6.5 Medium · Not analysed yet · Published 16 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Angular: SSRF via protocol-relative and backslash URLs in Angular Platform-Server](https://agentprime.io/advisories/GHSA-45q2-gjvg-7973.md)
  `GHSA-45q2-gjvg-7973`, `CVE-2026-41423` · npm `@angular/platform-server`: affected `<=18.2.14 || >=19.0.0-next.0, <19.2.21 || >=20.0.0-next.0, <20.3.19 || >=21.0.0-next.0, <21.2.9 || >=22.0.0-next.0, <22.0.0-next.8`, fixed in `19.2.21`, `20.3.19`, `21.2.9`, `22.0.0-next.8` · CVSS 8.7 High · Not analysed yet · Published 16 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Flowise: APIChain Prompt Injection SSRF in GET/POST API Chains](https://agentprime.io/advisories/GHSA-6r77-hqx7-7vw8.md)
  `GHSA-6r77-hqx7-7vw8`, `CVE-2026-41271` · npm `flowise` and 1 more: affected `<3.1.0`, fixed in `3.1.0` · CVSS 7.1 High · Not analysed yet · Published 16 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Flowise: SSRF Protection Bypass (TOCTOU & Default Insecure)](https://agentprime.io/advisories/GHSA-2x8m-83vc-6wv4.md)
  `GHSA-2x8m-83vc-6wv4`, `CVE-2026-41272` · npm `flowise` and 1 more: affected `<3.1.0`, fixed in `3.1.0` · CVSS 7.1 High · Not analysed yet · Published 16 Apr 2026 · Tags: Race condition, Server-side request forgery (SSRF)
- [Flowise: SSRF Protection Bypass via Unprotected Built-in HTTP Modules in Custom Function Sandbox](https://agentprime.io/advisories/GHSA-xhmj-rg95-44hv.md)
  `GHSA-xhmj-rg95-44hv`, `CVE-2026-41270` · npm `flowise` and 1 more: affected `<3.1.0`, fixed in `3.1.0` · CVSS 7.1 High · Not analysed yet · Published 16 Apr 2026 · Tags: Broken access control, Server-side request forgery (SSRF)
- [Istio: SSRF via RequestAuthentication jwksUri](https://agentprime.io/advisories/GHSA-fgw5-hp8f-xfhc.md)
  `GHSA-fgw5-hp8f-xfhc`, `CVE-2026-41413`, `GO-2026-5363` · Go `istio.io/istio`: affected `<0.0.0-20260410004459-189832a289c1`, fixed in `0.0.0-20260410004459-189832a289c1` · CVSS 5.0 Medium · Not analysed yet · Published 16 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Kyverno: ServiceAccount token leaked to external servers via apiCall service URL](https://agentprime.io/advisories/GHSA-f9g8-6ppc-pqq4.md)
  `GHSA-f9g8-6ppc-pqq4`, `BIT-kyverno-2026-41323`, `CVE-2026-41323`, `GO-2026-5351` · Go `github.com/kyverno/kyverno`: affected `<1.17.0`, fixed in `1.17.0` · CVSS 8.1 High · Not analysed yet · Published 16 Apr 2026 · Tags: Information disclosure, Server-side request forgery (SSRF)
- [Flowise Execute Flow function has an SSRF vulnerability](https://agentprime.io/advisories/GHSA-9hrv-gvrv-6gf2.md)
  `GHSA-9hrv-gvrv-6gf2`, `CVE-2026-56275` · npm `flowise` and 1 more: affected `<3.1.0`, fixed in `3.1.0` · CVSS 6.0 Medium · Not analysed yet · Published 16 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Flowise: SSRF Protection Bypass via Direct node-fetch / axios Usage (Patch Enforcement Failure)](https://agentprime.io/advisories/GHSA-qqvm-66q4-vf5c.md)
  `GHSA-qqvm-66q4-vf5c`, `CVE-2026-43995` · npm `flowise` and 1 more: affected `<3.1.0`, fixed in `3.1.0` · CVSS 5.3 Medium · Not analysed yet · Published 16 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Weblate: SSRF via the webhook add-on using unprotected fetch_url()](https://agentprime.io/advisories/GHSA-f8hv-g549-hwg2.md)
  `GHSA-f8hv-g549-hwg2`, `CVE-2026-39845`, `PYSEC-2026-156` · PyPI `weblate`: affected `<5.17`, fixed in `5.17` · CVSS 4.1 Medium · Not analysed yet · Published 16 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Weblate: SSRF via Project-Level Machinery Configuration](https://agentprime.io/advisories/GHSA-xrwr-fcw6-fmq8.md)
  `GHSA-xrwr-fcw6-fmq8`, `CVE-2026-34244`, `PYSEC-2026-2314` · PyPI `weblate`: affected `<5.17`, fixed in `5.17` · CVSS 5.0 Medium · Not analysed yet · Published 16 Apr 2026 · Tags: Information disclosure, Server-side request forgery (SSRF)
- [Weblate: Authenticated SSRF via redirect bypass of ALLOWED_ASSET_DOMAINS in screenshot URL uploads](https://agentprime.io/advisories/GHSA-5fhx-9jwj-867m.md)
  `GHSA-5fhx-9jwj-867m`, `CVE-2026-33440`, `PYSEC-2026-2312` · PyPI `weblate`: affected `<5.17`, fixed in `5.17` · CVSS 5.0 Medium · Not analysed yet · Published 16 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [ProcessWire: server-side request forgery vulnerability in the admin panel's 'Add Module From URL' feature](https://agentprime.io/advisories/GHSA-gmwr-9j4p-96vm.md)
  `GHSA-gmwr-9j4p-96vm`, `CVE-2026-40500`, `PKSA-m19p-x1h4-xw57` · Packagist `processwire/processwire`: affected `<=3.0.255`, no fixed version yet · CVSS 6.8 Medium · Not analysed yet · Published 16 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [NocoBase has SSRF in Workflow HTTP Request and Custom Request Plugins](https://agentprime.io/advisories/GHSA-mvvv-v22x-xqwp.md)
  `GHSA-mvvv-v22x-xqwp`, `CVE-2026-40346` · npm `@nocobase/plugin-workflow-request`: affected `<2.0.37`, fixed in `2.0.37` · CVSS 6.4 Medium · Not analysed yet · Published 15 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Craft CMS has a host header injection leading to SSRF via resource-js endpoint](https://agentprime.io/advisories/GHSA-95wr-3f2v-v2wh.md)
  `GHSA-95wr-3f2v-v2wh`, `CVE-2026-41130`, `PKSA-ntd3-69q5-4cfy` · Packagist `craftcms/cms`: affected `>=4.0.0-RC1, <4.17.9 || >=5.0.0-RC1, <5.9.15`, fixed in `4.17.9`, `5.9.15` · CVSS 5.5 Medium · Not analysed yet · Published 14 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Server-Side Request Forgery (SSRF) in Craft CMS with Asset Uploads Mutations](https://agentprime.io/advisories/GHSA-3m9m-24vh-39wx.md)
  `GHSA-3m9m-24vh-39wx`, `CVE-2026-41129`, `PKSA-wb3t-ts8t-d4cj` · Packagist `craftcms/cms`: affected `>=4.0.0-RC1, <4.17.9 || >=5.0.0-RC1, <5.9.15`, fixed in `4.17.9`, `5.9.15` · CVSS 5.5 Medium · Not analysed yet · Published 14 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Novu has SSRF via conditions filter webhook bypasses validateUrlSsrf() protection](https://agentprime.io/advisories/GHSA-4x48-cgf9-q33f.md)
  `GHSA-4x48-cgf9-q33f`, `CVE-2026-125114` · npm `@novu/api`: affected `<3.15.0`, fixed in `3.15.0` · CVSS 8.3 High · Not analysed yet · Published 14 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [WWBN AVideo has a SSRF via same-domain hostname with alternate port bypasses isSSRFSafeURL](https://agentprime.io/advisories/GHSA-j432-4w3j-3w8j.md)
  `GHSA-j432-4w3j-3w8j`, `CVE-2026-41060`, `PKSA-8cks-7g1w-tz19` · Packagist `wwbn/avideo`: affected `<=29.0`, no fixed version yet · CVSS 7.7 High · Not analysed yet · Published 14 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [WWBN AVideo has an incomplete fix for CVE-2026-33039: SSRF](https://agentprime.io/advisories/GHSA-793q-xgj6-7frp.md)
  `GHSA-793q-xgj6-7frp`, `CVE-2026-41055`, `PKSA-zgmc-4215-ztzk` · Packagist `wwbn/avideo`: affected `<=29.0`, no fixed version yet · CVSS 8.6 High · Not analysed yet · Published 14 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Kyverno has SSRF via CEL http.Get/http.Post in NamespacedValidatingPolicy allows cross-namespace data access](https://agentprime.io/advisories/GHSA-rggm-jjmc-3394.md)
  `GHSA-rggm-jjmc-3394`, `BIT-kyverno-2026-4789`, `CVE-2026-4789`, `GO-2026-5621` · Go `github.com/kyverno/kyverno`: affected `>=1.16.0, <1.17.0`, fixed in `1.17.0` · CVSS 8.5 High · Not analysed yet · Published 14 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Jellyfin: Potential SSRF + Arbitrary file read via LiveTV M3U tuner](https://agentprime.io/advisories/CVE-2026-35032.md)
  `CVE-2026-35032` · CVE record: jellyfin jellyfin · CVSS 8.6 High · Not analysed yet · Published 14 Apr 2026 · Tags: Path traversal, Server-side request forgery (SSRF)
- [Chamilo LMS: Unauthenticated SSRF via PENS Plugin allows attacker to probe internal network and reach cloud metadata services](https://agentprime.io/advisories/CVE-2026-34160.md)
  `CVE-2026-34160` · CVE record: chamilo chamilo-lms · CVSS 8.6 High · Not analysed yet · Published 14 Apr 2026 · Tags: Authentication bypass, Server-side request forgery (SSRF)
- [Chamilo LMS has Unauthenticated SSRF and Open Email Relay via install.ajax.php test_mailer action](https://agentprime.io/advisories/CVE-2026-33715.md)
  `CVE-2026-33715` · CVE record: chamilo chamilo-lms · CVSS 7.2 High · Not analysed yet · Published 14 Apr 2026 · Tags: Authentication bypass, Server-side request forgery (SSRF)
- [Kyverno APICall SSRF Vulnerability Leading to Multi-Tenant Isolation Breach](https://agentprime.io/advisories/GHSA-fmqp-4wfc-w3v7.md)
  `GHSA-fmqp-4wfc-w3v7`, `BIT-kyverno-2026-84199`, `CVE-2026-84199`, `GO-2026-5371` · Go `github.com/kyverno/kyverno`: affected `<1.16.2`, fixed in `1.16.2` · CVSS 6.9 Medium · Not analysed yet · Published 14 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Kyverno has unrestricted outbound requests in Kyverno apiCall enabling SSRF](https://agentprime.io/advisories/GHSA-qr4g-8hrp-c4rw.md)
  `GHSA-qr4g-8hrp-c4rw`, `BIT-kyverno-2026-84196`, `CVE-2026-84196`, `GO-2026-5594` · Go `github.com/kyverno/kyverno`: affected `<=1.17.1`, no fixed version yet · CVSS 8.3 High · Not analysed yet · Published 14 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Webkul Krayin CRM has Server-Side Request Forgery (SSRF)](https://agentprime.io/advisories/GHSA-fpx9-9hq8-w2xc.md)
  `GHSA-fpx9-9hq8-w2xc`, `CVE-2026-38527`, `PKSA-gcg3-xvcm-8tz7` · Packagist `krayin/laravel-crm`: affected `<=2.2.0`, no fixed version yet · CVSS 8.5 High · Not analysed yet · Published 14 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in Fortinet FortiSOAR on-premise and others](https://agentprime.io/advisories/CVE-2025-59809.md)
  `CVE-2025-59809` · CVE record: Fortinet FortiSOAR on-premise and 1 more · CVSS 4.1 Medium · Not analysed yet · Published 14 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [MaxKB: SSRF via sandbox network hook bypass](https://agentprime.io/advisories/CVE-2026-39418.md)
  `CVE-2026-39418` · CVE record: 1Panel-dev MaxKB · CVSS 5.0 Medium · Not analysed yet · Published 14 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [HummerRisk Video File Download URL ServerService.java ServerService.addServer server-side request forgery](https://agentprime.io/advisories/CVE-2026-6220.md)
  `CVE-2026-6220` · CVE record: HummerRisk · CVSS 5.1 Medium · Not analysed yet · Published 13 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [EspoCRM: SSRF via DNS Rebinding in Attachment fromImageUrl Endpoint Allows Internal Network Access](https://agentprime.io/advisories/CVE-2026-33659.md)
  `CVE-2026-33659` · CVE record: espocrm espocrm · CVSS 3.5 Low · Not analysed yet · Published 13 Apr 2026 · Tags: Race condition, Server-side request forgery (SSRF)
- [DbGate REST/GraphQL openApiDriver.ts apiServerUrl1 server-side request forgery](https://agentprime.io/advisories/CVE-2026-6215.md)
  `CVE-2026-6215` · CVE record: DbGate · CVSS 5.3 Medium · Not analysed yet · Published 13 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [EspoCRM has authenticated SSRF via internal-host validation bypass using alternative IPv4 notation](https://agentprime.io/advisories/CVE-2026-33534.md)
  `CVE-2026-33534` · CVE record: espocrm espocrm · CVSS 4.3 Medium · Not analysed yet · Published 13 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Apache SkyWalking MCP: Server-Side Request Forgery via SW-URL Header in MCP Server](https://agentprime.io/advisories/GHSA-c4hg-6933-x62x.md)
  `GHSA-c4hg-6933-x62x`, `CVE-2026-34476`, `GO-2026-5310` · Go `github.com/apache/skywalking-mcp`: affected `<0.2.0`, fixed in `0.2.0` · CVSS 7.1 High · Not analysed yet · Published 13 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Server-Side Request Forgery (SSRF) via URL Parameter in Foxit PDF Services API](https://agentprime.io/advisories/CVE-2026-5936.md)
  `CVE-2026-5936` · CVE record: Foxit Software Inc. Foxit PDF Services API · CVSS 8.5 High · Not analysed yet · Published 13 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [AstrBotDevs AstrBot API Endpoint post_data.get server-side request forgery](https://agentprime.io/advisories/CVE-2026-6119.md)
  `CVE-2026-6119` · CVE record: AstrBotDevs AstrBot · CVSS 5.3 Medium · Not analysed yet · Published 12 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [MetaGPT affected by server-side request forgery in metagpt/utils/common.py](https://agentprime.io/advisories/GHSA-r5v8-c28h-f8r8.md)
  `GHSA-r5v8-c28h-f8r8`, `CVE-2026-6111`, `PYSEC-2026-2642` · PyPI `metagpt`: affected `<=0.8.2`, no fixed version yet · CVSS 5.3 Medium · Not analysed yet · Published 12 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [UsersWP <= 1.2.58 - Authenticated (Subscriber+) Server-Side Request Forgery via 'uwp_crop' Parameter](https://agentprime.io/advisories/CVE-2026-4979.md)
  `CVE-2026-4979` · CVE record: stiofansisland UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP · CVSS 5.0 Medium · Not analysed yet · Published 11 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [rembg server is vulnerable to Server-Side Request Forgery (SSRF) and a weak default CORS configuration](https://agentprime.io/advisories/GHSA-55v6-g8pm-pw4c.md)
  `GHSA-55v6-g8pm-pw4c` · PyPI `rembg`: affected `<2.0.75`, fixed in `2.0.75` · CVSS 4.3 Medium · Not analysed yet · Published 10 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Duplicate Advisory: GeoNode contains a server-side request forgery vulnerability in the service registration endpoint](https://agentprime.io/advisories/GHSA-v8f7-cg9p-w5jx.md)
  `GHSA-v8f7-cg9p-w5jx` · PyPI `geonode`: affected `>=4.0.0, <4.4.5 || >=5.0.0, <5.0.2`, fixed in `4.4.5`, `5.0.2` · CVSS 6.3 Medium · Withdrawn · Not analysed yet · Published 10 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Arcane has Unauthenticated SSRF with Conditional Response Reflection in Template Fetch Endpoint](https://agentprime.io/advisories/GHSA-ff24-4prj-gpmj.md)
  `GHSA-ff24-4prj-gpmj`, `CVE-2026-40242`, `GO-2026-5356` · Go `github.com/getarcaneapp/arcane/backend`: affected `<1.17.3`, fixed in `1.17.3` · CVSS 7.2 High · Not analysed yet · Published 10 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [GeoNode versions 4.0 before 4.4.5 and 5.0 before 5.0.2 contain a server-side request forgery vulnerability that allows authenticated users with document upload permissions to trigger arbitrary outb...](https://agentprime.io/advisories/PYSEC-2026-2159.md)
  `PYSEC-2026-2159`, `CVE-2026-39921` · PyPI `geonode`: affected `>=4.0.0, <4.4.5 || >=5.0.0, <5.0.2`, fixed in `4.4.5`, `5.0.2` · CVSS 5.3 Medium · Not analysed yet · Published 10 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Ech0 has SSRF via DNS Resolution Bypass in Webhook URL Validation](https://agentprime.io/advisories/GHSA-r2x7-427f-rq69.md)
  `GHSA-r2x7-427f-rq69`, `CVE-2026-79671`, `GO-2026-5603` · Go `github.com/lin-snow/ech0`: affected `<4.4.3`, fixed in `4.4.3` · CVSS 5.1 Medium · Not analysed yet · Published 10 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain](https://agentprime.io/advisories/GHSA-fvcv-3m26-pcqx.md)
  `GHSA-fvcv-3m26-pcqx`, `CVE-2026-40175` · npm `axios`: affected `<0.31.0 || >=1.0.0, <1.15.0`, fixed in `0.31.0`, `1.15.0` · CVSS 4.8 Medium · Not analysed yet · Published 10 Apr 2026 · Tags: Other injection, HTTP request smuggling, Broken access control, Server-side request forgery (SSRF)
- [PraisonAI Vulnerable to Server-Side Request Forgery via Unvalidated webhook_url in Jobs API](https://agentprime.io/advisories/GHSA-8frj-8q3m-xhgm.md)
  `GHSA-8frj-8q3m-xhgm`, `CVE-2026-40114`, `PYSEC-2026-2906` · PyPI `praisonai`: affected `<4.5.128`, fixed in `4.5.128` · CVSS 7.2 High · Not analysed yet · Published 10 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [PraisonAIAgents: SSRF via unvalidated URL in \`web_crawl\` httpx fallback](https://agentprime.io/advisories/GHSA-qq9r-63f6-v542.md)
  `GHSA-qq9r-63f6-v542`, `CVE-2026-40160`, `PYSEC-2026-2951` · PyPI `praisonaiagents`: affected `>=0.13.23, <1.5.128`, fixed in `1.5.128` · CVSS 7.1 High · Not analysed yet · Published 10 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [PraisonAIAgents has SSRF and Local File Read via Unvalidated URLs in web_crawl Tool](https://agentprime.io/advisories/GHSA-8f4v-xfm9-3244.md)
  `GHSA-8f4v-xfm9-3244`, `CVE-2026-40150`, `PYSEC-2026-2945` · PyPI `praisonaiagents`: affected `<1.5.128`, fixed in `1.5.128` · CVSS 7.7 High · Not analysed yet · Published 10 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [SiYuan Affected by Zero-Click NTLM Hash Theft and Blind SSRF via Mermaid Diagram Rendering](https://agentprime.io/advisories/GHSA-w95v-4h65-j455.md)
  `GHSA-w95v-4h65-j455`, `CVE-2026-40107`, `GO-2026-5702` · Go `github.com/siyuan-note/siyuan/kernel`: affected `<0.0.0-20260407035653-2f416e5253f1`, fixed in `0.0.0-20260407035653-2f416e5253f1` · CVSS 8.7 High · Not analysed yet · Published 10 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Postiz has Server-Side Request Forgery via Redirect Bypass in /api/public/stream](https://agentprime.io/advisories/CVE-2026-40168.md)
  `CVE-2026-40168` · CVE record: gitroomhq postiz-app · CVSS 8.2 High · Not analysed yet · Published 10 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Chartbrew has SSRF in API Data Connection - No IP Validation on User-Provided URLs](https://agentprime.io/advisories/CVE-2026-30232.md)
  `CVE-2026-30232` · CVE record: chartbrew chartbrew · CVSS 7.8 High · Not analysed yet · Published 10 Apr 2026 · Tags: Server-side request forgery (SSRF)

Newest: <https://agentprime.io/advisories/tag/ssrf.md>
Older: <https://agentprime.io/advisories/tag/ssrf.md?cursor=WyIyMDI2LTA0LTEwVDE5OjE1OjExLjQzOTAwMFoiLCJDVkUtMjAyNi0zMDIzMiJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=ssrf&cursor=WyIyMDI2LTA0LTE3VDIyOjExOjMzLjAwMDAwMFoiLCJHSFNBLTUyN20tOTc2ci1qZjc5Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/ssrf/?cursor=WyIyMDI2LTA0LTE3VDIyOjExOjMzLjAwMDAwMFoiLCJHSFNBLTUyN20tOTc2ci1qZjc5Il0>. Everything for agents: <https://agentprime.io/llms.txt>.