# Server-side request forgery (SSRF).

The server made to send requests an attacker chooses. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [router-for-me CLIProxyAPI api_tools.go server-side request forgery](https://agentprime.io/advisories/CVE-2026-8081.md)
  `CVE-2026-8081` · CVE record: router-for-me CLIProxyAPI · CVSS 5.3 Medium · Not analysed yet · Published 7 May 2026 · Tags: Server-side request forgery (SSRF)
- [Wallos: Shared local webhook allowlist lets low-privilege users send arbitrary requests to allowlisted internal services](https://agentprime.io/advisories/CVE-2026-41689.md)
  `CVE-2026-41689` · CVE record: ellite Wallos · CVSS 6.0 Medium · Not analysed yet · Published 7 May 2026 · Tags: Broken access control, Server-side request forgery (SSRF)
- [Incomplete fix for CVE-2026-33399: SSRF in Wallos](https://agentprime.io/advisories/CVE-2026-41688.md)
  `CVE-2026-41688` · CVE record: ellite Wallos · CVSS 7.7 High · Not analysed yet · Published 7 May 2026 · Tags: Server-side request forgery (SSRF)
- [Wallos: SSRF CGNAT Bypass in subscription/payments Logo URL — is_cgnat_ip() Not Used in Inline Checks](https://agentprime.io/advisories/CVE-2026-41687.md)
  `CVE-2026-41687` · CVE record: ellite Wallos · CVSS 4.3 Medium · Not analysed yet · Published 7 May 2026 · Tags: Server-side request forgery (SSRF)
- [docling-graph has SSRF via Missing Internal IP Validation in URLInputHandler](https://agentprime.io/advisories/GHSA-fqph-j6v6-jvgx.md)
  `GHSA-fqph-j6v6-jvgx`, `CVE-2026-44520`, `PYSEC-2026-2458` · PyPI `docling-graph`: affected `<1.5.1`, fixed in `1.5.1` · CVSS 5.7 Medium · Not analysed yet · Published 7 May 2026 · Tags: Open redirect, Server-side request forgery (SSRF)
- [Gotenberg allows Chromium URL conversion routes to read arbitrary files under /tmp via file:// scheme](https://agentprime.io/advisories/GHSA-g924-cjx7-2rjw.md)
  `GHSA-g924-cjx7-2rjw`, `CVE-2026-42597`, `GO-2026-5395` · Go `github.com/gotenberg/gotenberg/v7` and 1 more: affected `<=7.10.2`, no fixed version yet · CVSS 5.9 Medium · Not analysed yet · Published 7 May 2026 · Tags: Path traversal, Server-side request forgery (SSRF)
- [Gotenberg vulnerable to unauthenticated SSRF via default deny-list bypass in downloadFrom and webhook](https://agentprime.io/advisories/GHSA-4vmc-gm8v-m35h.md)
  `GHSA-4vmc-gm8v-m35h`, `CVE-2026-42596`, `GO-2026-5132` · Go `github.com/gotenberg/gotenberg/v8`: affected `<8.32.0`, fixed in `8.32.0` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 May 2026 · Tags: Server-side request forgery (SSRF)
- [Gotenberg's DNS rebinding bypasses SSRF validation on Chromium URL conversion routes](https://agentprime.io/advisories/GHSA-2pmr-289p-44r3.md)
  `GHSA-2pmr-289p-44r3`, `CVE-2026-42592`, `GO-2026-4990` · Go `github.com/gotenberg/gotenberg/v8`: affected `<=8.31.0`, no fixed version yet · CVSS 5.3 Medium · Not analysed yet · Published 7 May 2026 · Tags: Race condition, Server-side request forgery (SSRF)
- [Gotenberg has a Server-Side Request Forgery (SSRF) Issue](https://agentprime.io/advisories/GHSA-rm4c-xj6x-49mw.md)
  `GHSA-rm4c-xj6x-49mw`, `CVE-2026-42591`, `GO-2026-5627` · Go `github.com/gotenberg/gotenberg/v8`: affected `<=8.31.0`, no fixed version yet · CVSS 8.2 High · Not analysed yet · Published 7 May 2026 · Tags: Server-side request forgery (SSRF)
- [Playwright Capture permits access to local files and internal network resources during page capture](https://agentprime.io/advisories/GHSA-687h-xw6f-q2qw.md)
  `GHSA-687h-xw6f-q2qw`, `CVE-2026-44439`, `PYSEC-2026-2259` · PyPI `playwrightcapture`: affected `<1.39.6`, fixed in `1.39.6` · CVSS 6.6 Medium · Not analysed yet · Published 6 May 2026 · Tags: Server-side request forgery (SSRF)
- [misp-modules has unsafe remote resource fetching in expansion](https://agentprime.io/advisories/GHSA-fhq3-2gf3-8f3j.md)
  `GHSA-fhq3-2gf3-8f3j`, `CVE-2026-44363`, `PYSEC-2026-2650` · PyPI `misp-modules`: affected `<3.0.8`, fixed in `3.0.8` · CVSS 5.8 Medium · Not analysed yet · Published 6 May 2026 · Tags: Weak cryptography or TLS, Server-side request forgery (SSRF)
- [PraisonAI has an SSRF bypass](https://agentprime.io/advisories/GHSA-q9pw-vmhh-384g.md)
  `GHSA-q9pw-vmhh-384g`, `CVE-2026-44335`, `PYSEC-2026-2950` · PyPI `praisonaiagents`: affected `<1.6.32`, fixed in `1.6.32` · CVSS 7.7 High · Not analysed yet · Published 6 May 2026 · Tags: Server-side request forgery (SSRF)
- [Duplicate Advisory: OpenClaw: QQBot direct media upload skipped URL SSRF validation](https://agentprime.io/advisories/GHSA-r747-33r4-rmjw.md)
  `GHSA-r747-33r4-rmjw` · npm `openclaw`: affected `<2026.4.20`, fixed in `2026.4.20` · CVSS 5.8 Medium · Withdrawn · Not analysed yet · Published 6 May 2026 · Tags: Server-side request forgery (SSRF)
- [Duplicate Advisory: OpenClaw validates Zalo outbound photo URLs through the SSRF guard](https://agentprime.io/advisories/GHSA-qvmw-h675-h7qg.md)
  `GHSA-qvmw-h675-h7qg` · npm `openclaw`: affected `<2026.4.22`, fixed in `2026.4.22` · CVSS 8.6 High · Withdrawn · Not analysed yet · Published 6 May 2026 · Tags: Server-side request forgery (SSRF)
- [QuantumNous/new-api has an SSRF Filter Bypass via 0.0.0.0](https://agentprime.io/advisories/GHSA-v5c3-6wvc-pc2q.md)
  `GHSA-v5c3-6wvc-pc2q`, `CVE-2026-42339`, `GO-2026-5652` · Go `github.com/QuantumNous/new-api`: affected `<=0.11.9-alpha.1`, no fixed version yet · CVSS 7.1 High · Not analysed yet · Published 6 May 2026 · Tags: Server-side request forgery (SSRF)
- [Tauri has an Origin Confusion Issue that Allows Remote Pages to Invoke Local-Only IPC Commands](https://agentprime.io/advisories/GHSA-7gmj-67g7-phm9.md)
  `GHSA-7gmj-67g7-phm9`, `CVE-2026-42184` · crates.io `tauri`: affected `>=2.0.0, <2.11.1`, fixed in `2.11.1` · CVSS 6.1 Medium · Not analysed yet · Published 6 May 2026 · Tags: Server-side request forgery (SSRF)
- [Cisco Unity Connection Server-Side Request Forgery Vulnerability](https://agentprime.io/advisories/CVE-2026-20035.md)
  `CVE-2026-20035` · CVE record: Cisco Cisco Unity Connection · CVSS 7.2 High · Not analysed yet · Published 6 May 2026 · Tags: Server-side request forgery (SSRF)
- [AVideo has SSRF Protection Bypass via HTTP Redirect and DNS Rebinding in isSSRFSafeURL()](https://agentprime.io/advisories/GHSA-2hch-c97c-g99x.md)
  `GHSA-2hch-c97c-g99x`, `CVE-2026-43884`, `PKSA-458v-1gr5-bf2y` · Packagist `wwbn/avideo`: affected `<=29.0`, no fixed version yet · CVSS 7.7 High · Not analysed yet · Published 5 May 2026 · Tags: Server-side request forgery (SSRF)
- [AVideo has Blind SSRF in YPTWallet Donation Webhook via Missing isSSRFSafeURL() Check and CURLOPT_FOLLOWLOCATION Redirect Bypass](https://agentprime.io/advisories/GHSA-wp38-whx3-xffh.md)
  `GHSA-wp38-whx3-xffh`, `CVE-2026-43879`, `PKSA-n1mw-ddw6-yyqd` · Packagist `wwbn/avideo`: affected `<=29.0`, no fixed version yet · CVSS 5.4 Medium · Not analysed yet · Published 5 May 2026 · Tags: Server-side request forgery (SSRF)
- [MagicMirror vulnerable to unauthenticated SSRF via /cors endpoint](https://agentprime.io/advisories/GHSA-ph6f-2cvq-79hq.md)
  `GHSA-ph6f-2cvq-79hq`, `CVE-2026-42281` · npm `magicmirror`: affected `<2.36.0`, fixed in `2.36.0` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 May 2026 · Tags: Server-side request forgery (SSRF)
- [open-websearch has SSRF in \`fetchWebContent\` MCP tool: bracketed IPv6 literals and non-resolving hostname check bypass \`isPrivateOrLocalHostname\`](https://agentprime.io/advisories/GHSA-v228-72c7-fx8j.md)
  `GHSA-v228-72c7-fx8j`, `CVE-2026-42260` · npm `open-websearch`: affected `<2.1.7`, fixed in `2.1.7` · CVSS 8.2 High · Not analysed yet · Published 5 May 2026 · Tags: Server-side request forgery (SSRF), CWE-20, CWE-693
- [ssrfcheck Vulnerable to Server-Side Request Forgery (SSRF) and Incomplete List of Disallowed Inputs](https://agentprime.io/advisories/GHSA-j4rj-2jr5-m439.md)
  `GHSA-j4rj-2jr5-m439`, `CVE-2026-43929` · npm `ssrfcheck`: affected `<=1.3.0`, no fixed version yet · CVSS 8.2 High · Not analysed yet · Published 5 May 2026 · Tags: Server-side request forgery (SSRF), CWE-184
- [ssrfcheck: SSRF Bypass Caused by Failure to Classify Reserved IP Address Space as Invalid](https://agentprime.io/advisories/GHSA-p4hc-9pjh-55c8.md)
  `GHSA-p4hc-9pjh-55c8`, `CVE-2025-8267` · npm `ssrfcheck`: affected `<1.2.0`, fixed in `1.2.0` · CVSS 8.8 High · Not analysed yet · Published 5 May 2026 · Tags: Server-side request forgery (SSRF)
- [link-preview-js vulnerable to IPv6 and internal loopback attacks](https://agentprime.io/advisories/GHSA-4gp8-rjrq-ch6q.md)
  `GHSA-4gp8-rjrq-ch6q`, `CVE-2026-43897` · npm `link-preview-js`: affected `<4.0.1`, fixed in `4.0.1` · CVSS 8.7 High · Not analysed yet · Published 5 May 2026 · Tags: Server-side request forgery (SSRF)
- [Admidio has an incomplete fix for CVE-2026-32812 (SSRF)](https://agentprime.io/advisories/GHSA-hcjj-chvw-fmw9.md)
  `GHSA-hcjj-chvw-fmw9`, `CVE-2026-42194`, `PKSA-k2cf-4hh1-rf1y` · Packagist `admidio/admidio`: affected `<5.0.9`, fixed in `5.0.9` · CVSS 6.8 Medium · Not analysed yet · Published 5 May 2026 · Tags: Server-side request forgery (SSRF)
- [Geyser Vulnerable to Server-Side Request Forgery (SSRF) via Player Head Texture URL in Geyser](https://agentprime.io/advisories/GHSA-xcfg-fcr5-gw9r.md)
  `GHSA-xcfg-fcr5-gw9r`, `CVE-2026-42188` · Maven `org.geysermc.geyser:core`: affected `<2.9.3`, fixed in `2.9.3` · CVSS 2.4 Low · Not analysed yet · Published 5 May 2026 · Tags: Server-side request forgery (SSRF)
- [requests-hardened is Vulnerable to Server-Side Request Forgery](https://agentprime.io/advisories/GHSA-vh75-fwv3-pqrh.md)
  `GHSA-vh75-fwv3-pqrh`, `CVE-2026-42175`, `PYSEC-2026-3050` · PyPI `requests-hardened`: affected `<1.2.1`, fixed in `1.2.1` · CVSS 6.5 Medium · Not analysed yet · Published 5 May 2026 · Tags: Server-side request forgery (SSRF)
- [XWiki PlantUML Macro Vulnerable to Server-Side Request Forgery (SSRF) via 'server' parameter](https://agentprime.io/advisories/GHSA-42fc-7w97-8vrc.md)
  `GHSA-42fc-7w97-8vrc`, `CVE-2026-42140` · Maven `org.xwiki.contrib.plantuml:macro-plantuml-macro`: affected `<2.4.1`, fixed in `2.4.1` · CVSS 4.4 Medium · Not analysed yet · Published 5 May 2026 · Tags: Server-side request forgery (SSRF)
- [twenty-server SSRF protection bypass via IPv4-mapped IPv6 address normalization](https://agentprime.io/advisories/CVE-2026-33975.md)
  `CVE-2026-33975` · CVE record: twentyhq twenty · CVSS 8.3 High · Not analysed yet · Published 5 May 2026 · Tags: Server-side request forgery (SSRF)
- [Eclipse BaSyx Java Server SDK vulnerable to Server-Side Request Forgery](https://agentprime.io/advisories/GHSA-gx3v-wxfj-8h24.md)
  `GHSA-gx3v-wxfj-8h24`, `CVE-2026-7412` · Maven `org.eclipse.basyx:basyx.sdk`: affected `<2.0.0-milestone-10`, fixed in `2.0.0-milestone-10` · CVSS 8.6 High · Not analysed yet · Published 5 May 2026 · Tags: Server-side request forgery (SSRF)
- [FireFighter has unauthenticated SSRF in its Raid jira_bot endpoint that allows IAM credential theft](https://agentprime.io/advisories/GHSA-fqvv-jvhr-g5jc.md)
  `GHSA-fqvv-jvhr-g5jc`, `CVE-2026-42864`, `PYSEC-2026-339` · PyPI `firefighter-incident`: affected `<0.0.54`, fixed in `0.0.54` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 May 2026 · Tags: Authentication bypass, Server-side request forgery (SSRF)
- [edx-enterprise has SSRF via SAML metadata URL in sync_provider_data endpoint](https://agentprime.io/advisories/GHSA-64cv-vxpr-j6vc.md)
  `GHSA-64cv-vxpr-j6vc`, `CVE-2026-42860`, `PYSEC-2026-58` · PyPI `edx-enterprise`: affected `>=7.0.2, <7.0.5`, fixed in `7.0.5` · CVSS 8.5 High · Not analysed yet · Published 5 May 2026 · Tags: Server-side request forgery (SSRF)
- [Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem <= 3.5.3 - Authenticated (Contributor+) Server-Side Request Forgery via 'imageUrl'](https://agentprime.io/advisories/CVE-2026-2948.md)
  `CVE-2026-2948` · CVE record: jegstudio Gutenverse – Ultimate WordPress FSE Blocks Addons & Ecosystem · CVSS 6.4 Medium · Not analysed yet · Published 5 May 2026 · Tags: Server-side request forgery (SSRF)
- [Axios: no_proxy bypass via IP alias allows SSRF](https://agentprime.io/advisories/GHSA-m7pr-hjqh-92cm.md)
  `GHSA-m7pr-hjqh-92cm`, `CVE-2026-42038` · npm `axios`: affected `<0.31.1 || >=1.0.0, <1.15.1`, fixed in `0.31.1`, `1.15.1` · CVSS 6.8 Medium · Not analysed yet · Published 5 May 2026 · Tags: Server-side request forgery (SSRF)
- [Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.0](https://agentprime.io/advisories/GHSA-pmwg-cvhr-8vh7.md)
  `GHSA-pmwg-cvhr-8vh7`, `CVE-2026-42043` · npm `axios`: affected `<0.31.1 || >=1.0.0, <1.15.1`, fixed in `0.31.1`, `1.15.1` · CVSS 7.2 High · Not analysed yet · Published 5 May 2026 · Tags: Server-side request forgery (SSRF), CWE-183, CWE-441
- [pyload-ng: non-admin SETTINGS users can redirect all outbound traffic through an attacker-controlled proxy via unrestricted \`proxy.\*\` config (incomplete fix for CVE-2026-33509 / -35463 / -35464 / -35586)](https://agentprime.io/advisories/GHSA-pg67-9wjv-mr85.md)
  `GHSA-pg67-9wjv-mr85`, `CVE-2026-42313`, `PYSEC-2026-127` · PyPI `pyload-ng`: affected `<0.5.0b3.dev100`, fixed in `0.5.0b3.dev100` · CVSS 8.3 High · Not analysed yet · Published 4 May 2026 · Tags: Broken access control, Server-side request forgery (SSRF), CWE-441
- [OpenClaw validates Zalo outbound photo URLs through the SSRF guard](https://agentprime.io/advisories/GHSA-2hh7-c75g-qj2r.md)
  `GHSA-2hh7-c75g-qj2r`, `CVE-2026-44116` · npm `openclaw`: affected `<2026.4.22`, fixed in `2026.4.22` · CVSS 6.9 Medium · Not analysed yet · Published 4 May 2026 · Tags: Server-side request forgery (SSRF)
- [Incus has Blind SSRF via Image Import Preflight HEAD](https://agentprime.io/advisories/GHSA-8gw4-p4wq-4hcv.md)
  `GHSA-8gw4-p4wq-4hcv`, `CVE-2026-35527`, `GO-2026-5254` · Go `github.com/lxc/incus/v6/cmd/incusd`: affected `<7.0.0`, fixed in `7.0.0` · CVSS 5.3 Medium · Not analysed yet · Published 4 May 2026 · Tags: Server-side request forgery (SSRF)
- [pixelsock directus-mcp MCP index.ts validateUrl server-side request forgery](https://agentprime.io/advisories/CVE-2026-7729.md)
  `CVE-2026-7729` · CVE record: pixelsock directus-mcp · CVSS 5.3 Medium · Not analysed yet · Published 4 May 2026 · Tags: Server-side request forgery (SSRF)
- [Royal Addons for Elementor <= 1.7.1057 - Authenticated (Contributor+) Server-Side Request Forgery via CSV URL Parameter](https://agentprime.io/advisories/CVE-2026-6229.md)
  `CVE-2026-6229` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 7.2 High · Not analysed yet · Published 2 May 2026 · Tags: Server-side request forgery (SSRF)
- [JeecgBoot uploadImgByHttpEndpoint CommonController.java HttpFileToMultipartFileUtil.downloadImageData server-side request forgery](https://agentprime.io/advisories/CVE-2026-7605.md)
  `CVE-2026-7605` · CVE record: JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 2 May 2026 · Tags: Server-side request forgery (SSRF)
- [PixelYourSite Pro <= 12.5.0.1 - Unauthenticated Blind Server-Side Request Forgery via 'urls\[\]' Parameter](https://agentprime.io/advisories/CVE-2026-7049.md)
  `CVE-2026-7049` · CVE record: pixelyoursite PixelYourSite Pro – Your smart PIXEL (TAG) Manager · CVSS 7.2 High · Not analysed yet · Published 2 May 2026 · Tags: Server-side request forgery (SSRF)
- [Ona <= 1.26 - Authenticated (Administrator+) Blind Server-Side Request Forgery via 'download_link' Parameter](https://agentprime.io/advisories/CVE-2026-6812.md)
  `CVE-2026-6812` · CVE record: deothemes Ona · CVSS 4.4 Medium · Not analysed yet · Published 2 May 2026 · Tags: Server-side request forgery (SSRF)
- [JeecgBoot OpenApi Service OpenApiController.java OpenApiController.call server-side request forgery](https://agentprime.io/advisories/CVE-2026-7604.md)
  `CVE-2026-7604` · CVE record: JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 2 May 2026 · Tags: Server-side request forgery (SSRF)
- [JeecgBoot LoadFile Endpoint FileDownloadUtils.jav checkPathTraversalBatch server-side request forgery](https://agentprime.io/advisories/CVE-2026-7603.md)
  `CVE-2026-7603` · CVE record: JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 2 May 2026 · Tags: Server-side request forgery (SSRF)
- [Apache Neethi doesn't impose any restrictions on URIs when manually fetching remote policy references through the PolicyReference API](https://agentprime.io/advisories/GHSA-287c-fxr7-3w6c.md)
  `GHSA-287c-fxr7-3w6c`, `CVE-2026-42404` · Maven `org.apache.neethi:neethi`: affected `<3.2.2`, fixed in `3.2.2` · CVSS 6.5 Medium · Not analysed yet · Published 1 May 2026 · Tags: Server-side request forgery (SSRF)
- [Server-Side Request Forgery (SSRF) in Langflow URL Component](https://agentprime.io/advisories/CVE-2026-3340.md)
  `CVE-2026-3340` · CVE record: IBM Langflow Desktop · CVSS 6.5 Medium · Not analysed yet · Published 30 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [n8n-mcp's IPv4-mapped IPv6 addresses bypass SSRF protection in validateUrlSync(), enabling full SSRF for SDK embedders](https://agentprime.io/advisories/GHSA-56c3-vfp2-5qqj.md)
  `GHSA-56c3-vfp2-5qqj`, `CVE-2026-42449` · npm `n8n-mcp`: affected `>=2.47.4, <2.47.14`, fixed in `2.47.14` · CVSS 8.5 High · Not analysed yet · Published 30 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Weblate Vulnerable to Authenticated SSRF via Project Backup Import bypassing validate_repo_url](https://agentprime.io/advisories/GHSA-cwcx-382v-8m9g.md)
  `GHSA-cwcx-382v-8m9g`, `CVE-2026-41654`, `PYSEC-2026-2317` · PyPI `weblate`: affected `<5.17.1`, fixed in `5.17.1` · CVSS 5.3 Medium · Not analysed yet · Published 30 Apr 2026 · Tags: Server-side request forgery (SSRF), CWE-20
- [Gotenberg Vulnerable to Unauthenticated SSRF via Unfiltered Webhook URL](https://agentprime.io/advisories/GHSA-5vh4-rgv7-p9g4.md)
  `GHSA-5vh4-rgv7-p9g4`, `CVE-2026-39383`, `GO-2026-5155` · Go `github.com/gotenberg/gotenberg/v8`: affected `>=8.29.1, <8.31.0`, fixed in `8.31.0` · CVSS 6.9 Medium · Not analysed yet · Published 30 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Gotenberg has case-insensitive URL scheme that bypasses webhook and downloadFrom deny-list SSRF protection](https://agentprime.io/advisories/GHSA-5q7p-7jgv-ww56.md)
  `GHSA-5q7p-7jgv-ww56`, `CVE-2026-40280`, `GO-2026-5151` · Go `github.com/gotenberg/gotenberg/v8`: affected `<8.31.0`, fixed in `8.31.0` · CVSS 7.8 High · Not analysed yet · Published 30 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [A Server-Side Request Forgery (SSRF) in the /ureport/datasource/testConnection endpoint of SpringBlade v4.8.0 allows authenticated attackers to scan internal resources via a crafted GET request.](https://agentprime.io/advisories/CVE-2026-36764.md)
  `CVE-2026-36764` · CVE record · CVSS 5.0 Medium · Not analysed yet · Published 30 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [A Server-Side Request Forgery (SSRF) in the /themes/{name}/upgrade-from-uri endpoint of halo v2.22.14 allows authenticated attackers to scan internal resources via a crafted GET request.](https://agentprime.io/advisories/CVE-2026-36759.md)
  `CVE-2026-36759` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 30 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [A Server-Side Request Forgery (SSRF) in the /themes/-/install-from-uri endpoint of halo v2.22.14 allows authenticated attackers to scan internal resources via a crafted GET request.](https://agentprime.io/advisories/CVE-2026-36758.md)
  `CVE-2026-36758` · CVE record · CVSS 4.3 Medium · Not analysed yet · Published 30 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [A Server-Side Request Forgery (SSRF) in the /plugins/{name}/upgrade-from-uri endpoint of halo v2.22.14 allows authenticated attackers to scan internal resources via a crafted GET request.](https://agentprime.io/advisories/CVE-2026-36757.md)
  `CVE-2026-36757` · CVE record · CVSS 4.3 Medium · Not analysed yet · Published 30 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [A Server-Side Request Forgery (SSRF) in the /plugins/-/install-from-uri endpoint of halo v2.22.14 allows authenticated attackers to scan internal resources via a crafted GET request.](https://agentprime.io/advisories/CVE-2026-36756.md)
  `CVE-2026-36756` · CVE record · CVSS 5.4 Medium · Not analysed yet · Published 30 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [i18next-http-middleware has path traversal / SSRF via user-controlled language and namespace parameters](https://agentprime.io/advisories/GHSA-jfgf-83c5-2c4m.md)
  `GHSA-jfgf-83c5-2c4m`, `CVE-2026-42353` · npm `i18next-http-middleware`: affected `<3.9.3`, fixed in `3.9.3` · CVSS 8.2 High · Not analysed yet · Published 29 Apr 2026 · Tags: Path traversal, Server-side request forgery (SSRF)
- [pygeoapi 0.23.x: Unauthenticated SSRF via OGC API - Processes Subscriber](https://agentprime.io/advisories/GHSA-jgvc-94c8-3chc.md)
  `GHSA-jgvc-94c8-3chc`, `CVE-2026-42352`, `PYSEC-2026-2986` · PyPI `pygeoapi`: affected `>=0.23.0, <0.23.3`, fixed in `0.23.3` · CVSS 8.6 High · Not analysed yet · Published 29 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Algovate xhs-mcp MCP mcp.server.ts xhs_publish_content server-side request forgery](https://agentprime.io/advisories/CVE-2026-7417.md)
  `CVE-2026-7417` · CVE record: Algovate xhs-mcp · CVSS 6.9 Medium · Not analysed yet · Published 29 Apr 2026 · Tags: Server-side request forgery (SSRF)
- [Nginx-UI has Server-Side Request Forgery (SSRF) via Cluster Proxy Middleware that Allows Access to Internal Services](https://agentprime.io/advisories/GHSA-wr32-99hh-6f35.md)
  `GHSA-wr32-99hh-6f35`, `CVE-2026-44015`, `GO-2026-5719` · Go `github.com/0xJacky/Nginx-UI`: affected `<=2.3.4`, no fixed version yet · CVSS 8.5 High · Not analysed yet · Published 29 Apr 2026 · Tags: Server-side request forgery (SSRF)

Newest: <https://agentprime.io/advisories/tag/ssrf.md>
Older: <https://agentprime.io/advisories/tag/ssrf.md?cursor=WyIyMDI2LTA0LTI5VDIwOjU0OjU0LjAwMDAwMFoiLCJHSFNBLXdyMzItOTloaC02ZjM1Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=ssrf&cursor=WyIyMDI2LTA1LTA3VDE4OjA4OjA5LjI3NzAwMFoiLCJDVkUtMjAyNi00MTkwNSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/ssrf/?cursor=WyIyMDI2LTA1LTA3VDE4OjA4OjA5LjI3NzAwMFoiLCJDVkUtMjAyNi00MTkwNSJd>. Everything for agents: <https://agentprime.io/llms.txt>.