# Server-side request forgery (SSRF).

The server made to send requests an attacker chooses. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Server-Side Request Forgery (SSRF) in Chamilo LMS](https://agentprime.io/advisories/CVE-2026-31941.md)
  `CVE-2026-31941` · CVE record: chamilo chamilo-lms · CVSS 7.7 High · Not analysed yet · Published 10 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [FastGPT has Unauthenticated SSRF in /api/core/app/mcpTools/runTool via missing CHECK_INTERNAL_IP default](https://agentprime.io/advisories/CVE-2026-40100.md)
  `CVE-2026-40100` · CVE record: labring FastGPT · CVSS 5.3 Medium · Not analysed yet · Published 10 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [OpenClaw vulnerable to SSRF in src/agents/tools/web-fetch.ts](https://agentprime.io/advisories/GHSA-52vj-fvrv-7q82.md)
  `GHSA-52vj-fvrv-7q82`, `CVE-2026-6011` · npm `openclaw`: affected `<2026.1.29`, fixed in `2026.1.29` · CVSS 6.3 Medium · Not analysed yet · Published 10 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Duplicate Advisory: OpenClaw: SSRF via Unguarded Configured Base URLs in Multiple Channel Extensions (Incomplete Fix for CVE-2026-28476)](https://agentprime.io/advisories/GHSA-8j7f-g9gv-7jhc.md)
  `GHSA-8j7f-g9gv-7jhc` · npm `openclaw`: affected `<2026.3.28`, fixed in `2026.3.28` · CVSS 7.4 High · Withdrawn · Not analysed yet · Published 10 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Sonicverse has Server-Side Request Forgery via user-controlled URLs in dashboard API client](https://agentprime.io/advisories/CVE-2026-40089.md)
  `CVE-2026-40089` · CVE record: sonicverse-eu audiostreaming-stack · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [OpenClaw: Strict browser SSRF bypass in Playwright redirect handling leaves private targets reachable](https://agentprime.io/advisories/GHSA-w8g9-x8gx-crmm.md)
  `GHSA-w8g9-x8gx-crmm`, `CVE-2026-42430` · npm `openclaw`: affected `<2026.4.8`, fixed in `2026.4.8` · CVSS 4.8 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [OpenClaw has Browser SSRF Policy Bypass via Interaction-Triggered Navigation](https://agentprime.io/advisories/GHSA-vr5g-mmx7-h897.md)
  `GHSA-vr5g-mmx7-h897`, `CVE-2026-41912` · npm `openclaw`: affected `<2026.4.8`, fixed in `2026.4.8` · CVSS 4.8 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [OpenClaw QQ Bot Extension missing SSRF Protection on All Media Fetch Paths](https://agentprime.io/advisories/GHSA-3fv3-6p2v-gxwj.md)
  `GHSA-3fv3-6p2v-gxwj`, `CVE-2026-41914` · npm `openclaw`: affected `<2026.4.8`, fixed in `2026.4.8` · CVSS 5.1 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRF](https://agentprime.io/advisories/GHSA-3p68-rc4w-qgx5.md)
  `GHSA-3p68-rc4w-qgx5`, `CVE-2025-62718` · npm `axios`: affected `<0.31.0 || >=1.0.0, <1.15.0`, fixed in `0.31.0`, `1.15.0` · CVSS 6.3 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: Server-side request forgery (SSRF), CWE-441, CWE-1289
- [Plane has a Server-Side Request Forgery (SSRF) in Favicon Fetching](https://agentprime.io/advisories/CVE-2026-39843.md)
  `CVE-2026-39843` · CVE record: makeplane plane · CVSS 7.7 High · Not analysed yet · Published 9 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [api-lab-mcp vulnerable to SSRF](https://agentprime.io/advisories/GHSA-crh9-3gjh-m6gc.md)
  `GHSA-crh9-3gjh-m6gc`, `CVE-2026-5832` · npm `api-lab-mcp`: affected `<=0.2.1`, no fixed version yet · CVSS 6.9 Medium · Not analysed yet · Published 9 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Jizhicms v2.5.4 is vulnerable to Server-Side Request Forgery (SSRF) in User Evaluation, Message, and Comment modules.](https://agentprime.io/advisories/CVE-2025-50228.md)
  `CVE-2025-50228` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [bigsk1 openai-realtime-ui API Proxy Endpoint server.js server-side request forgery](https://agentprime.io/advisories/CVE-2026-5803.md)
  `CVE-2026-5803` · CVE record: bigsk1 openai-realtime-ui · CVSS 5.3 Medium · Not analysed yet · Published 8 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [n8n-mcp has authenticated SSRF via instance-URL header in multi-tenant HTTP mode](https://agentprime.io/advisories/GHSA-4ggg-h7ph-26qr.md)
  `GHSA-4ggg-h7ph-26qr`, `CVE-2026-39974` · npm `n8n-mcp`: affected `<2.47.4`, fixed in `2.47.4` · CVSS 8.5 High · Not analysed yet · Published 8 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [InvenTree has SSRF via Remote Image Download — No IP/Hostname Validation on remote_image URLs](https://agentprime.io/advisories/CVE-2026-39362.md)
  `CVE-2026-39362` · CVE record: inventree InvenTree · CVSS 5.3 Medium · Not analysed yet · Published 8 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [mcp-from-openapi is Vulnerable to SSRF via $ref Dereferencing in Untrusted OpenAPI Specifications](https://agentprime.io/advisories/GHSA-v6ph-xcq9-qxxj.md)
  `GHSA-v6ph-xcq9-qxxj`, `CVE-2026-39885` · npm `@frontmcp/adapters` and 2 more: affected `<1.0.4`, fixed in `1.0.4` · CVSS 7.5 High · Not analysed yet · Published 8 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Zammad has a Server-side request forgery (SSRF) via webhooks](https://agentprime.io/advisories/CVE-2026-34719.md)
  `CVE-2026-34719` · CVE record: zammad zammad · CVSS 8.3 High · Not analysed yet · Published 8 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Mirror-registry: quay: server-side request forgery in proxy cache upstream registry configuration](https://agentprime.io/advisories/CVE-2026-32591.md)
  `CVE-2026-32591` · CVE record: Red Hat Red Hat Quay 3.10 and 4 more · CVSS 5.2 Medium · Not analysed yet · Published 8 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Server-Side Request Forgery (SSRF) in Kibana One Workflow Leading to Information Disclosure](https://agentprime.io/advisories/CVE-2026-33458.md)
  `CVE-2026-33458` · CVE record: Elastic Kibana · CVSS 6.8 Medium · Not analysed yet · Published 8 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Mirror-registry: quay: quay: server-side request forgery via log export functionality](https://agentprime.io/advisories/CVE-2026-2377.md)
  `CVE-2026-2377` · CVE record: Red Hat Red Hat Quay 3.10 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress Podigee plugin <= 1.4.0 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-39695.md)
  `CVE-2026-39695` · CVE record: podigee Podigee · CVSS 5.4 Medium · Not analysed yet · Published 8 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress Visual Link Preview plugin <= 2.3.0 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-39670.md)
  `CVE-2026-39670` · CVE record: Brecht Visual Link Preview · CVSS 6.0 Medium · Not analysed yet · Published 8 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.11 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-39647.md)
  `CVE-2026-39647` · CVE record: sonaar MP3 Audio Player for Music, Radio & Podcast by Sonaar · CVSS 5.4 Medium · Not analysed yet · Published 8 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress GlobalPayments WooCommerce plugin <= 1.18.0 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-39645.md)
  `CVE-2026-39645` · CVE record: Global Payments GlobalPayments WooCommerce · CVSS 5.4 Medium · Not analysed yet · Published 8 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress Getty Images plugin <= 4.1.0 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-39630.md)
  `CVE-2026-39630` · CVE record: Getty Images Getty Images · CVSS 6.4 Medium · Not analysed yet · Published 8 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress Nelio Content plugin <= 4.3.1 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-39521.md)
  `CVE-2026-39521` · CVE record: Nelio Software Nelio Content · CVSS 4.9 Medium · Not analysed yet · Published 8 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress Coming Soon Page, Under Construction & Maintenance Mode by SeedProd plugin <= 6.19.8 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-39464.md)
  `CVE-2026-39464` · CVE record: SeedProd Coming Soon Page, Under Construction & Maintenance Mode by SeedProd · CVSS 5.5 Medium · Not analysed yet · Published 8 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access](https://agentprime.io/advisories/CVE-2026-1343.md)
  `CVE-2026-1343` · CVE record: IBM Verify Identity Access Container and 3 more · CVSS 7.2 High · Not analysed yet · Published 8 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [WWBN AVideo has an Allowlisted downloadURL media extensions bypass SSRF protection and enable internal response exfiltration (Incomplete fix for CVE-2026-27732)](https://agentprime.io/advisories/GHSA-cmcr-q4jf-p6q9.md)
  `GHSA-cmcr-q4jf-p6q9`, `CVE-2026-39370`, `PKSA-k95w-1pmg-ryfd` · Packagist `WWBN/AVideo`: affected `<=26.0`, no fixed version yet · CVSS 7.1 High · Not analysed yet · Published 8 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [WWBN AVideo has a Live restream log callback flow enabling stored SSRF to internal services](https://agentprime.io/advisories/GHSA-q4x6-6mm2-crg9.md)
  `GHSA-q4x6-6mm2-crg9`, `CVE-2026-39368`, `PKSA-9dyr-jdcn-mr53` · Packagist `WWBN/AVideo`: affected `<=26.0`, no fixed version yet · CVSS 6.5 Medium · Not analysed yet · Published 8 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [A Server-Side Request Forgery (SSRF) vulnerability exists in the Print Format functionality of ERPNext v16.0.1 and Frappe Framework v16.1.1, where user-supplied HTML is insufficiently sanitized befor…](https://agentprime.io/advisories/CVE-2026-31017.md)
  `CVE-2026-31017` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [QD 20230821 is vulnerable to Server-side request forgery (SSRF) via a crafted request](https://agentprime.io/advisories/CVE-2023-46945.md)
  `CVE-2023-46945` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [OpenObserve has a SSRF Protection Bypass via IPv6 Bracket Notation in validate_enrichment_url](https://agentprime.io/advisories/CVE-2026-39361.md)
  `CVE-2026-39361` · CVE record: openobserve openobserve · CVSS 7.7 High · Not analysed yet · Published 7 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [OpenClaw: Marketplace Plugin Download Follows Redirects Without SSRF Protection](https://agentprime.io/advisories/GHSA-vjx8-8p7h-82gr.md)
  `GHSA-vjx8-8p7h-82gr`, `CVE-2026-41297` · npm `openclaw`: affected `<2026.3.31`, fixed in `2026.3.31` · CVSS 4.8 Medium · Not analysed yet · Published 7 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [SSRF via Referer header in ChurchCRM allows server-side HTTP/HTTPS requests to arbitrary hosts](https://agentprime.io/advisories/CVE-2026-35572.md)
  `CVE-2026-35572` · CVE record: ChurchCRM CRM · CVSS 7.0 High · Not analysed yet · Published 7 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [LinkAce has SSRF via CheckLinksCommand - Link URL Update Bypasses laravel-html-meta Protection](https://agentprime.io/advisories/CVE-2026-35516.md)
  `CVE-2026-35516` · CVE record: Kovah LinkAce · CVSS 5.0 Medium · Not analysed yet · Published 7 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [text-generation-webui has a SSRF in superbooga/superboogav2 extensions — no URL validation](https://agentprime.io/advisories/CVE-2026-35486.md)
  `CVE-2026-35486` · CVE record: oobabooga text-generation-webui · CVSS 7.5 High · Not analysed yet · Published 7 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Papra has a Blind Server-Side Request Forgery (SSRF) via Webhook URL](https://agentprime.io/advisories/CVE-2026-35461.md)
  `CVE-2026-35461` · CVE record: papra-hq papra · CVSS 5.0 Medium · Not analysed yet · Published 7 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Distribution affected by pull-through cache credential exfiltration via www-authenticate bearer realm](https://agentprime.io/advisories/GHSA-3p65-76g6-3w7r.md)
  `GHSA-3p65-76g6-3w7r`, `CVE-2026-33540`, `GO-2026-5094` · Go `github.com/distribution/distribution` and 1 more: affected `<=2.8.3`, no fixed version yet · CVSS 7.5 High · Not analysed yet · Published 6 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [whisperX REST API: SSRF in download_from_url() — URL validation happens after HTTP request, extension bypass via .mp3](https://agentprime.io/advisories/CVE-2026-34981.md)
  `CVE-2026-34981` · CVE record: pavelzbornik whisperX-FastAPI · CVSS 5.8 Medium · Not analysed yet · Published 6 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [assafelovic gpt-researcher ws Endpoint server-side request forgery](https://agentprime.io/advisories/CVE-2026-5633.md)
  `CVE-2026-5633` · CVE record: assafelovic gpt-researcher · CVSS 6.9 Medium · Not analysed yet · Published 6 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [hcengineering Huly Platform Import Endpoint index.ts server-side request forgery](https://agentprime.io/advisories/CVE-2026-5623.md)
  `CVE-2026-5623` · CVE record: hcengineering Huly Platform · CVSS 5.3 Medium · Not analysed yet · Published 6 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [kalcaddle kodbox shareMake/shareCheck server-side request forgery](https://agentprime.io/advisories/CVE-2026-5618.md)
  `CVE-2026-5618` · CVE record: kalcaddle kodbox · CVSS 6.3 Medium · Not analysed yet · Published 6 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [imprvhub mcp-browser-agent URL Parameter handlers.ts CallToolRequestSchema server-side request forgery](https://agentprime.io/advisories/CVE-2026-5607.md)
  `CVE-2026-5607` · CVE record: imprvhub mcp-browser-agent · CVSS 5.3 Medium · Not analysed yet · Published 6 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [QingdaoU OnlineJudge judge_server_heartbeat Endpoint JudgeServer.service_url server-side request forgery](https://agentprime.io/advisories/CVE-2026-5538.md)
  `CVE-2026-5538` · CVE record: QingdaoU OnlineJudge · CVSS 5.3 Medium · Not analysed yet · Published 5 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Ollama Model Pull API download.go server-side request forgery](https://agentprime.io/advisories/CVE-2026-5530.md)
  `CVE-2026-5530` · CVE record: Ollama · CVSS 5.3 Medium · Not analysed yet · Published 5 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [web3.py: SSRF via CCIP Read (EIP-3668) OffchainLookup URL handling](https://agentprime.io/advisories/GHSA-5hr4-253g-cpx2.md)
  `GHSA-5hr4-253g-cpx2`, `CVE-2026-111171`, `CVE-2026-40072`, `PYSEC-2026-3414` · PyPI `web3`: affected `>=6.0.0b3, <7.15.0 || >=8.0.0b1, <8.0.0b2`, fixed in `7.15.0`, `8.0.0b2` · CVSS 1.7 Low · Not analysed yet · Published 4 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Directus: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses in File Import](https://agentprime.io/advisories/GHSA-wv3h-5fx7-966h.md)
  `GHSA-wv3h-5fx7-966h`, `CVE-2026-35409` · npm `directus`: affected `<11.16.0`, fixed in `11.16.0` · CVSS 7.7 High · Not analysed yet · Published 4 Apr 2026 · Tags: Server-side request forgery (SSRF), CWE-20
- [pyLoad: SSRF in parse_urls API endpoint via unvalidated URL parameter](https://agentprime.io/advisories/GHSA-2wvg-62qm-gj33.md)
  `GHSA-2wvg-62qm-gj33`, `CVE-2026-35187`, `PYSEC-2026-2988` · PyPI `pyload-ng`: affected `<=0.5.0b3.dev96`, no fixed version yet · CVSS 7.7 High · Not analysed yet · Published 4 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [vLLM: Server-Side Request Forgery (SSRF) in \`download_bytes_from_url \`](https://agentprime.io/advisories/GHSA-pf3h-qjgv-vcpr.md)
  `GHSA-pf3h-qjgv-vcpr`, `CVE-2026-34753`, `PYSEC-2026-3410` · PyPI `vllm`: affected `>=0.16.0, <0.19.0`, fixed in `0.19.0` · CVSS 5.4 Medium · Not analysed yet · Published 3 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [curl_cffi: Redirect-based SSRF leads to internal network access in curl_cffi (with TLS impersonation bypass)](https://agentprime.io/advisories/GHSA-qw2m-4pqf-rmpp.md)
  `GHSA-qw2m-4pqf-rmpp`, `CVE-2026-33752`, `PYSEC-2026-2431` · PyPI `curl-cffi`: affected `<0.15.0`, fixed in `0.15.0` · CVSS 8.6 High · Not analysed yet · Published 3 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Budibase: Server-Side Request Forgery via REST Connector with Empty Default Blacklist](https://agentprime.io/advisories/GHSA-7r9j-r86q-7g45.md)
  `GHSA-7r9j-r86q-7g45`, `CVE-2026-31818` · npm `@budibase/backend-core`: affected `<3.33.4`, fixed in `3.33.4` · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Apr 2026 · Tags: Server-side request forgery (SSRF), CWE-1188
- [prompts.chat SSRF via Fal.ai Media Status Polling](https://agentprime.io/advisories/CVE-2026-22664.md)
  `CVE-2026-22664` · CVE record: f prompts.chat · CVSS 7.1 High · Not analysed yet · Published 3 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [prompts.chat Blind SSRF via media-generate](https://agentprime.io/advisories/CVE-2026-22662.md)
  `CVE-2026-22662` · CVE record: f prompts.chat · CVSS 5.3 Medium · Not analysed yet · Published 3 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Arbitrary internal service access via /v1/sys/proxy when Cloudflare Tunnel is enabled on ZimaOS](https://agentprime.io/advisories/CVE-2026-28798.md)
  `CVE-2026-28798` · CVE record: IceWhaleTech ZimaOS · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Microsoft Bing Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-32186.md)
  `CVE-2026-32186` · CVE record: Microsoft Microsoft Bing · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Casdoor vulnerable to SSRF via crafted Webhook URL](https://agentprime.io/advisories/GHSA-p8c7-hjc4-gwf8.md)
  `GHSA-p8c7-hjc4-gwf8`, `CVE-2026-5469`, `GO-2026-5535` · Go `github.com/casdoor/casdoor`: affected `<=1.1000.0`, no fixed version yet · CVSS 5.1 Medium · Not analysed yet · Published 3 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [mixelpixx Google-Research-MCP Model Context Protocol content-extractor.service.ts extractContent server-side request forgery](https://agentprime.io/advisories/CVE-2026-5470.md)
  `CVE-2026-5470` · CVE record: mixelpixx Google-Research-MCP · CVSS 5.3 Medium · Not analysed yet · Published 3 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Roundcube Webmail: Insufficient CSS sanitization in HTML e-mail messages](https://agentprime.io/advisories/GHSA-vxg2-hhgr-37fx.md)
  `GHSA-vxg2-hhgr-37fx`, `CVE-2026-35540`, `PKSA-vsf6-6r3q-jc1x` · Packagist `roundcube/roundcubemail`: affected `>=1.7-beta, <1.7-rc5`, fixed in `1.7-rc5` · CVSS 5.4 Medium · Not analysed yet · Published 3 Apr 2026 · Tags: Server-side request forgery (SSRF), CWE-669
- [Ech0: Unauthenticated SSRF in GetWebsiteTitle allows access to internal services and cloud metadata](https://agentprime.io/advisories/GHSA-cqgf-f4x7-g6wc.md)
  `GHSA-cqgf-f4x7-g6wc`, `CVE-2026-35037`, `GO-2026-5331` · Go `github.com/lin-snow/ech0`: affected `<1.4.8-0.20260401031029-4ca56fea5ba4`, fixed in `1.4.8-0.20260401031029-4ca56fea5ba4` · CVSS 7.2 High · Not analysed yet · Published 3 Apr 2026 · Tags: Server-side request forgery (SSRF)

Newest: <https://agentprime.io/advisories/tag/ssrf.md>
Older: <https://agentprime.io/advisories/tag/ssrf.md?cursor=WyIyMDI2LTA0LTAzVDAzOjMzOjAwLjAwMDAwMFoiLCJHSFNBLWNxZ2YtZjR4Ny1nNndjIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=ssrf&cursor=WyIyMDI2LTA0LTEwVDE5OjE1OjExLjQzOTAwMFoiLCJDVkUtMjAyNi0zMDIzMiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/ssrf/?cursor=WyIyMDI2LTA0LTEwVDE5OjE1OjExLjQzOTAwMFoiLCJDVkUtMjAyNi0zMDIzMiJd>. Everything for agents: <https://agentprime.io/llms.txt>.