# Server-side request forgery (SSRF).

The server made to send requests an attacker chooses. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Spring AI MCP Security: Unvalidated URL Fetching (SSRF)](https://agentprime.io/advisories/GHSA-qjp4-4jvr-xqg3.md)
  `GHSA-qjp4-4jvr-xqg3`, `CVE-2026-45609` · Maven `org.springaicommunity:mcp-client-security`: affected `<0.1.9`, fixed in `0.1.9` · CVSS 7.2 High · Not analysed yet · Published 18 May 2026 · Tags: Server-side request forgery (SSRF)
- [Mattermost doesn't validate the Host header when constructing response URLs for custom slash command](https://agentprime.io/advisories/GHSA-vqp5-2mrp-qqxg.md)
  `GHSA-vqp5-2mrp-qqxg`, `CVE-2026-6333`, `GO-2026-5671` · Go `github.com/mattermost/mattermost-server` and 1 more: affected `<5.3.2-0.20260325160634-e738016c5920`, fixed in `5.3.2-0.20260325160634-e738016c5920` · CVSS 3.5 Low · Not analysed yet · Published 18 May 2026 · Tags: Server-side request forgery (SSRF)
- [vercel ai provider-utils download-blob.ts validateDownloadUrl server-side request forgery](https://agentprime.io/advisories/CVE-2026-8768.md)
  `CVE-2026-8768` · CVE record: vercel ai · CVSS 6.9 Medium · Not analysed yet · Published 17 May 2026 · Tags: Server-side request forgery (SSRF)
- [CoreWorxLab CAAL test-hass Endpoint webhooks.py server-side request forgery](https://agentprime.io/advisories/CVE-2026-8725.md)
  `CVE-2026-8725` · CVE record: CoreWorxLab CAAL · CVSS 6.9 Medium · Not analysed yet · Published 17 May 2026 · Tags: Server-side request forgery (SSRF)
- [CouchCMS 2.2.1 Server-Side Request Forgery via SVG upload](https://agentprime.io/advisories/CVE-2021-47958.md)
  `CVE-2021-47958` · CVE record: CouchCMS CouchCMS · CVSS 5.3 Medium · Not analysed yet · Published 15 May 2026 · Tags: Server-side request forgery (SSRF)
- [AVideo CVE-2026-43884 incomplete fix - six (or more) \`isSSRFSafeURL()\` call sites still discard the \`$resolvedIP\` out-param at master HEAD post-\`603e7bf\`](https://agentprime.io/advisories/GHSA-c3ch-22rq-xfwr.md)
  `GHSA-c3ch-22rq-xfwr`, `CVE-2026-45619`, `PKSA-fc5p-jrjx-1jy4` · Packagist `WWBN/AVideo`: affected `<=29.0`, no fixed version yet · CVSS 6.5 Medium · Not analysed yet · Published 15 May 2026 · Tags: Race condition, Server-side request forgery (SSRF)
- [Budibase: SSRF Bypass via HTTP Redirect in REST Datasource Integration](https://agentprime.io/advisories/GHSA-fgqv-jh4g-pvg2.md)
  `GHSA-fgqv-jh4g-pvg2`, `CVE-2026-45715` · npm `@budibase/server`: affected `<3.38.1`, fixed in `3.38.1` · CVSS 7.7 High · Not analysed yet · Published 15 May 2026 · Tags: Server-side request forgery (SSRF)
- [Budibase: SSRF in AI Extract File Automation Step via Missing IP Blacklist Validation](https://agentprime.io/advisories/GHSA-rpj4-7x2v-wjrf.md)
  `GHSA-rpj4-7x2v-wjrf`, `CVE-2026-45548` · npm `@budibase/server`: affected `<3.34.8`, fixed in `3.34.8` · CVSS 7.7 High · Not analysed yet · Published 15 May 2026 · Tags: Server-side request forgery (SSRF)
- [@utcp/http: SSRF via attacker-controlled OpenAPI servers\[0\].url in HTTP communication protocol](https://agentprime.io/advisories/GHSA-r8j5-8747-88cm.md)
  `GHSA-r8j5-8747-88cm`, `CVE-2026-45366` · npm `@utcp/http`: affected `<1.1.2`, fixed in `1.1.2` · CVSS 4.7 Medium · Not analysed yet · Published 14 May 2026 · Tags: Server-side request forgery (SSRF)
- [DeepSeek TUI has SSRF IPV6 bypass](https://agentprime.io/advisories/GHSA-88gh-2526-gfrr.md)
  `GHSA-88gh-2526-gfrr`, `CVE-2026-45373` · crates.io `deepseek-tui`: affected `<0.8.26`, fixed in `0.8.26` · CVSS 7.4 High · Not analysed yet · Published 14 May 2026 · Tags: Server-side request forgery (SSRF)
- [DeepSeek TUI has SSRF via HTTP Redirect Bypass in fetch_url Tool](https://agentprime.io/advisories/GHSA-96ff-gc8g-wpvg.md)
  `GHSA-96ff-gc8g-wpvg`, `CVE-2026-45310` · crates.io `deepseek-tui` and 2 more: affected `<0.8.22`, fixed in `0.8.22` · CVSS 7.4 High · Not analysed yet · Published 14 May 2026 · Tags: Server-side request forgery (SSRF)
- [Open WebUI has a SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load Endpoints (not addressed by CVE-2025-65958)](https://agentprime.io/advisories/GHSA-rh5x-h6pp-cjj6.md)
  `GHSA-rh5x-h6pp-cjj6`, `CVE-2026-45401`, `PYSEC-2026-2755` · PyPI `open-webui`: affected `<0.9.5`, fixed in `0.9.5` · CVSS 8.5 High · Not analysed yet · Published 14 May 2026 · Tags: Server-side request forgery (SSRF)
- [Open WebUI has a Server-Side Request Forgery (SSRF) bypass in \`validate_url\`](https://agentprime.io/advisories/GHSA-8w7q-q5jp-jvgx.md)
  `GHSA-8w7q-q5jp-jvgx`, `CVE-2026-45400`, `PYSEC-2026-2715` · PyPI `open-webui`: affected `<0.9.5`, fixed in `0.9.5` · CVSS 8.5 High · Not analysed yet · Published 14 May 2026 · Tags: Server-side request forgery (SSRF)
- [Open WebUI vulnerable to blind server side request forgery (SSRF) via the PDF generate function](https://agentprime.io/advisories/GHSA-f776-fp4w-266c.md)
  `GHSA-f776-fp4w-266c`, `CVE-2026-45347`, `PYSEC-2026-2723` · PyPI `open-webui`: affected `<0.5.11`, fixed in `0.5.11` · CVSS 4.3 Medium · Not analysed yet · Published 14 May 2026 · Tags: Server-side request forgery (SSRF)
- [Open WebUI Vulnerable to SSRF via OAuth Profile Picture URL in \_process_picture_url (oauth.py)](https://agentprime.io/advisories/GHSA-24c9-2m8q-qhmh.md)
  `GHSA-24c9-2m8q-qhmh`, `CVE-2026-45338`, `PYSEC-2026-2691` · PyPI `open-webui`: affected `<0.9.0`, fixed in `0.9.0` · CVSS 7.7 High · Not analysed yet · Published 14 May 2026 · Tags: Server-side request forgery (SSRF)
- [Open WebUI has a full SSRF Vulnerability in the RAG Web Search Feature](https://agentprime.io/advisories/GHSA-4v7r-f4w8-8972.md)
  `GHSA-4v7r-f4w8-8972`, `CVE-2026-45331`, `PYSEC-2026-2702` · PyPI `open-webui`: affected `<0.9.0`, fixed in `0.9.0` · CVSS 8.5 High · Not analysed yet · Published 14 May 2026 · Tags: Server-side request forgery (SSRF)
- [Apostrophe has authenticated SSRF in rich-text widget import via @apostrophecms/area/validate-widget](https://agentprime.io/advisories/GHSA-pr28-mf3q-qpg6.md)
  `GHSA-pr28-mf3q-qpg6`, `CVE-2026-45012` · npm `apostrophe`: affected `<=4.29.0`, no fixed version yet · CVSS 7.6 High · Not analysed yet · Published 14 May 2026 · Tags: Server-side request forgery (SSRF)
- [Karakeep SDK has SSRF via metascraper-logo-favicon that bypasses validateUrl protections](https://agentprime.io/advisories/GHSA-7rx4-c5vx-g8w3.md)
  `GHSA-7rx4-c5vx-g8w3` · npm `@karakeep/sdk`: affected `<0.32.0`, fixed in `0.32.0` · CVSS 4.0, no score published · Not analysed yet · Published 14 May 2026 · Tags: Server-side request forgery (SSRF)
- [Nextcloud News: Authenticated blind SSRF via feed URL](https://agentprime.io/advisories/CVE-2026-44515.md)
  `CVE-2026-44515` · CVE record: nextcloud news · CVSS 2.3 Low · Not analysed yet · Published 14 May 2026 · Tags: Server-side request forgery (SSRF)
- [InfusedWoo Pro <= 5.1.2 - Unauthenticated Arbitrary File Read via 'url' Parameter](https://agentprime.io/advisories/CVE-2026-6514.md)
  `CVE-2026-6514` · CVE record: Infused Addons InfusedWoo Pro · CVSS 7.5 High · Not analysed yet · Published 14 May 2026 · Tags: Server-side request forgery (SSRF)
- [Server-Side Request Forgery (SSRF) in GitLab](https://agentprime.io/advisories/CVE-2026-7471.md)
  `CVE-2026-7471` · CVE record: GitLab GitLab · CVSS 3.5 Low · Not analysed yet · Published 14 May 2026 · Tags: Server-side request forgery (SSRF)
- [ERPNext: Possible SSRF by any authenticated user](https://agentprime.io/advisories/CVE-2026-44441.md)
  `CVE-2026-44441` · CVE record: frappe erpnext · CVSS 5.0 Medium · Not analysed yet · Published 13 May 2026 · Tags: Server-side request forgery (SSRF)
- [FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address](https://agentprime.io/advisories/CVE-2026-8328.md)
  `CVE-2026-8328` · CVE record: Python Software Foundation CPython · CVSS 5.9 Medium · Not analysed yet · Published 13 May 2026 · Tags: Server-side request forgery (SSRF)
- [PAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL Fetching](https://agentprime.io/advisories/CVE-2026-0258.md)
  `CVE-2026-0258` · CVE record: Palo Alto Networks Cloud NGFW and 2 more · CVSS 4.8 Medium · Not analysed yet · Published 13 May 2026 · Tags: Server-side request forgery (SSRF)
- [Nautobot: Webhook definitions could be used for server-side request forgery (SSRF)](https://agentprime.io/advisories/GHSA-c35q-vxrp-ph26.md)
  `GHSA-c35q-vxrp-ph26`, `CVE-2026-44797`, `PYSEC-2026-2227` · PyPI `nautobot`: affected `<2.4.33 || >=3.0.0a2, <3.1.2`, fixed in `2.4.33`, `3.1.2` · CVSS 8.5 High · Not analysed yet · Published 13 May 2026 · Tags: Server-side request forgery (SSRF)
- [SillyTavern has a SSRF vulnerability in the CORS proxy middleware](https://agentprime.io/advisories/GHSA-ccfq-2454-f5xw.md)
  `GHSA-ccfq-2454-f5xw`, `CVE-2026-44652` · npm `sillytavern`: affected `<1.18.0`, fixed in `1.18.0` · CVSS 6.9 Medium · Not analysed yet · Published 12 May 2026 · Tags: Server-side request forgery (SSRF)
- [mosparo: Rule package source URL stored SSRF enables internal HTTP probing](https://agentprime.io/advisories/CVE-2026-41195.md)
  `CVE-2026-41195` · CVE record: mosparo mosparo · CVSS 5.0 Medium · Not analysed yet · Published 12 May 2026 · Tags: Server-side request forgery (SSRF)
- [Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)](https://agentprime.io/advisories/CVE-2026-34647.md)
  `CVE-2026-34647` · CVE record: Adobe Adobe Commerce and 2 more · CVSS 7.4 High · Not analysed yet · Published 12 May 2026 · Tags: Server-side request forgery (SSRF)
- [Xibo: Authenticated Server-Side Request Forgery (SSRF) in Library Upload via URL functionality](https://agentprime.io/advisories/CVE-2026-42141.md)
  `CVE-2026-42141` · CVE record: xibosignage xibo-cms · CVSS 7.7 High · Not analysed yet · Published 12 May 2026 · Tags: Server-side request forgery (SSRF)
- [JunoClaw: SSRF in WAVS computeDataVerify allows cloud-metadata and internal-service access](https://agentprime.io/advisories/CVE-2026-43993.md)
  `CVE-2026-43993` · CVE record: Dragonmonk111 junoclaw · CVSS 8.2 High · Not analysed yet · Published 12 May 2026 · Tags: Server-side request forgery (SSRF)
- [Server-Side Request Forgery in API Checker leads to Privilege Escalation](https://agentprime.io/advisories/CVE-2026-30810.md)
  `CVE-2026-30810` · CVE record: Pandora FMS Pandora FMS · CVSS 7.1 High · Not analysed yet · Published 12 May 2026 · Tags: Server-side request forgery (SSRF)
- [local-deep-research is Vulnerable to HTML Injection via Unescaped User Input in PDF Export (\`pdf_service.py:\_markdown_to_html\`)](https://agentprime.io/advisories/GHSA-fj2m-qvh9-jq4q.md)
  `GHSA-fj2m-qvh9-jq4q`, `CVE-2026-43979`, `PYSEC-2026-2610` · PyPI `local-deep-research`: affected `<1.6.0`, fixed in `1.6.0` · CVSS 5.0 Medium · Not analysed yet · Published 11 May 2026 · Tags: Cross-site scripting (XSS), Server-side request forgery (SSRF)
- [jishenghua jshERP updatePlatformConfigByKey Endpoint UserService.java getUserByWeixinCode server-side request forgery](https://agentprime.io/advisories/CVE-2026-8320.md)
  `CVE-2026-8320` · CVE record: jishenghua jshERP · CVSS 5.1 Medium · Not analysed yet · Published 11 May 2026 · Tags: Server-side request forgery (SSRF)
- [A Server-Side Request Forgery (SSRF) vulnerability exists in MLflow versions prior to 3.9.0. The \`\_create_webhook()\` function in \`mlflow/server/handlers.py\` accepts a user-controlled \`url\` paramete...](https://agentprime.io/advisories/GHSA-65h7-c7c4-mghx.md)
  `GHSA-65h7-c7c4-mghx`, `BIT-mlflow-2026-2393`, `CVE-2026-2393`, `PYSEC-2026-2219` · PyPI `mlflow`: affected `<3.9.0`, fixed in `3.9.0` · CVSS 7.1 High · Not analysed yet · Published 11 May 2026 · Tags: Server-side request forgery (SSRF)
- [Open edX Platform: Server-Side Request Forgery (SSRF) in SAML Provider Data Sync Endpoint](https://agentprime.io/advisories/CVE-2026-42858.md)
  `CVE-2026-42858` · CVE record: openedx openedx-platform · CVSS 8.5 High · Not analysed yet · Published 11 May 2026 · Tags: Server-side request forgery (SSRF)
- [Nexus Repository 3 - Improper LDAP Referral Handling](https://agentprime.io/advisories/CVE-2026-3048.md)
  `CVE-2026-3048` · CVE record: Sonatype Nexus Repository · CVSS 5.1 Medium · Not analysed yet · Published 11 May 2026 · Tags: Insecure deserialization, Server-side request forgery (SSRF)
- [Budibase vulnerable to SSRF via trivial \`.tar.gz\` substring bypass in Plugin URL upload (\`/api/plugin\`)](https://agentprime.io/advisories/GHSA-xh5j-727m-w6gg.md)
  `GHSA-xh5j-727m-w6gg`, `CVE-2026-45061` · npm `budibase`: affected `<3.35.10`, fixed in `3.35.10` · CVSS 7.7 High · Not analysed yet · Published 11 May 2026 · Tags: Server-side request forgery (SSRF)
- [Next.js vulnerable to server-side request forgery in applications using WebSocket upgrades](https://agentprime.io/advisories/GHSA-c4j6-fc7j-m34r.md)
  `GHSA-c4j6-fc7j-m34r`, `CVE-2026-44578` · npm `next`: affected `>=13.4.13, <15.5.16 || >=16.0.0, <16.2.5`, fixed in `15.5.16`, `16.2.5` · CVSS 8.6 High · Critical (CVSS 7+ and EPSS) · EPSS 0.36 · Not analysed yet · Published 11 May 2026 · Tags: Server-side request forgery (SSRF)
- [GuardDog has a blind GitHub URL rewrite in remote project scanning causes SSRF and \`GH_TOKEN\` exfiltration](https://agentprime.io/advisories/GHSA-587r-mc96-6f2p.md)
  `GHSA-587r-mc96-6f2p`, `CVE-2026-44971`, `PYSEC-2026-2505` · PyPI `guarddog`: affected `>=1.0.0, <=2.9.0`, no fixed version yet · CVSS 8.2 High · Not analysed yet · Published 11 May 2026 · Tags: Server-side request forgery (SSRF)
- [Gotenberg: Server-Side Request Forgery via Chromium URL Endpoint with Redirect-Based Deny-List Bypass](https://agentprime.io/advisories/GHSA-chwh-f6gm-r836.md)
  `GHSA-chwh-f6gm-r836`, `CVE-2026-42595`, `GO-2026-5324` · Go `github.com/gotenberg/gotenberg/v8`: affected `<8.32.0`, fixed in `8.32.0` · CVSS 8.6 High · Not analysed yet · Published 11 May 2026 · Tags: Server-side request forgery (SSRF)
- [Akaunting Invoice PDF Rendering dompdf.php server-side request forgery](https://agentprime.io/advisories/CVE-2026-8193.md)
  `CVE-2026-8193` · CVE record: Akaunting · CVSS 5.3 Medium · Not analysed yet · Published 9 May 2026 · Tags: Server-side request forgery (SSRF)
- [LinkWarden: Server-Side Request Forgery (SSRF) in Link Creation via fetchTitleAndHeaders Function](https://agentprime.io/advisories/CVE-2026-44313.md)
  `CVE-2026-44313` · CVE record: linkwarden linkwarden · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 May 2026 · Tags: Server-side request forgery (SSRF)
- [pupnp: Port truncation via atoi() cast in parse_uri() allows SSRF port confusion](https://agentprime.io/advisories/CVE-2026-41682.md)
  `CVE-2026-41682` · CVE record: pupnp pupnp · CVSS 6.9 Medium · Not analysed yet · Published 8 May 2026 · Tags: Server-side request forgery (SSRF), CWE-195
- [Postiz: TOCTOU DNS rebinding bypasses all SSRF URL validation paths](https://agentprime.io/advisories/CVE-2026-42346.md)
  `CVE-2026-42346` · CVE record: gitroomhq postiz-app · CVSS 6.5 Medium · Not analysed yet · Published 8 May 2026 · Tags: Server-side request forgery (SSRF)
- [FastGPT: SSRF Vulnerability in Laf Workflow Node via Missing Internal Address Validation](https://agentprime.io/advisories/CVE-2026-44286.md)
  `CVE-2026-44286` · CVE record: labring FastGPT · CVSS 2.3 Low · Not analysed yet · Published 8 May 2026 · Tags: Server-side request forgery (SSRF)
- [FastGPT: Stored MCP tool URL SSRF in FastGPT workflow execution](https://agentprime.io/advisories/CVE-2026-44284.md)
  `CVE-2026-44284` · CVE record: labring FastGPT · CVSS 6.3 Medium · Not analysed yet · Published 8 May 2026 · Tags: Server-side request forgery (SSRF)
- [FastGPT: Cloud metadata endpoint SSRF protection bypass via port specification, IPv6 mapping, hex/decimal IP encoding, and trailing dot](https://agentprime.io/advisories/CVE-2026-42345.md)
  `CVE-2026-42345` · CVE record: labring FastGPT · CVSS 7.7 High · Not analysed yet · Published 8 May 2026 · Tags: Server-side request forgery (SSRF)
- [SolidCAM-GPPL-IDE: Path traversal in \`inc\` directive enables file probing and NTLM-hash leak](https://agentprime.io/advisories/CVE-2026-42213.md)
  `CVE-2026-42213` · CVE record: anzory SolidCAM-GPPL-IDE · CVSS 5.1 Medium · Not analysed yet · Published 8 May 2026 · Tags: Path traversal, Information disclosure, Weak cryptography or TLS, Server-side request forgery (SSRF)
- [Bunsink has an SSRF bypass in \`validate_webhook_url\`](https://agentprime.io/advisories/GHSA-fp53-qcf8-2xx2.md)
  `GHSA-fp53-qcf8-2xx2`, `CVE-2026-44502`, `PYSEC-2026-2405` · PyPI `bugsink`: affected `<2.1.3`, fixed in `2.1.3` · CVSS 4.3 Medium · Not analysed yet · Published 8 May 2026 · Tags: Server-side request forgery (SSRF)
- [MCP Registry has an unauthenticated SSRF: HTTP namespace verification dials 6to4 / NAT64 / site-local IPv6 addresses, bypassing private-address allowlist](https://agentprime.io/advisories/GHSA-r48c-v28r-pf6v.md)
  `GHSA-r48c-v28r-pf6v`, `CVE-2026-44430`, `GO-2026-5607` · Go `github.com/modelcontextprotocol/registry`: affected `<1.7.7`, fixed in `1.7.7` · CVSS 6.3 Medium · Not analysed yet · Published 8 May 2026 · Tags: Server-side request forgery (SSRF)
- [MCP Registry's GitHub OIDC tokens are replayable across registry deployments due to shared audience](https://agentprime.io/advisories/GHSA-95c3-6vvw-4mrq.md)
  `GHSA-95c3-6vvw-4mrq`, `CVE-2026-44428`, `GO-2026-5273` · Go `github.com/modelcontextprotocol/registry`: affected `<1.7.6`, fixed in `1.7.6` · CVSS 2.1 Low · Not analysed yet · Published 8 May 2026 · Tags: Server-side request forgery (SSRF)
- [n8n-mcp affected by path traversal, redirect-following SSRF, and telemetry payload exposure](https://agentprime.io/advisories/GHSA-8g7g-hmwm-6rv2.md)
  `GHSA-8g7g-hmwm-6rv2` · npm `n8n-mcp`: affected `<2.50.1`, fixed in `2.50.1` · CVSS 8.3 High · Not analysed yet · Published 8 May 2026 · Tags: Path traversal, Information disclosure, Server-side request forgery (SSRF)
- [n8n-mcp webhook and API client paths has an authenticated SSRF](https://agentprime.io/advisories/GHSA-cmrh-wvq6-wm9r.md)
  `GHSA-cmrh-wvq6-wm9r`, `CVE-2026-44694` · npm `n8n-mcp`: affected `>=2.18.7, <2.50.2`, fixed in `2.50.2` · CVSS 7.2 High · Not analysed yet · Published 8 May 2026 · Tags: Race condition, Server-side request forgery (SSRF)
- [PromptHub: Authenticated SSRF via IPv6 filter bypass in \`POST /api/skills/fetch-remote\`](https://agentprime.io/advisories/CVE-2026-42261.md)
  `CVE-2026-42261` · CVE record: legeling PromptHub · CVSS 7.1 High · Not analysed yet · Published 8 May 2026 · Tags: Server-side request forgery (SSRF), CWE-20, CWE-693
- [utcp-http vulnerable to SSRF via attacker-controlled OpenAPI servers\[0\].url in HTTP communication protocol](https://agentprime.io/advisories/GHSA-39j6-4867-gg4w.md)
  `GHSA-39j6-4867-gg4w`, `CVE-2026-44661`, `PYSEC-2026-3396` · PyPI `utcp-http`: affected `<1.1.2`, fixed in `1.1.2` · CVSS 4.7 Medium · Not analysed yet · Published 7 May 2026 · Tags: Server-side request forgery (SSRF)
- [Ech0 has Server-Side Request Forgery (SSRF) via Connect Handler fetchPeerConnectInfo](https://agentprime.io/advisories/GHSA-8mc6-xjpr-h98x.md)
  `GHSA-8mc6-xjpr-h98x`, `CVE-2026-79659`, `GO-2026-5259` · Go `github.com/lin-snow/ech0`: affected `<1.4.8-0.20260503040602-091d26d2d942`, fixed in `1.4.8-0.20260503040602-091d26d2d942` · CVSS 8.3 High · Not analysed yet · Published 7 May 2026 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery vulnerability in GitHub Enterprise Server notebook viewer via URL parser confusion](https://agentprime.io/advisories/CVE-2026-8034.md)
  `CVE-2026-8034` · CVE record: GitHub Enterprise Server · CVSS 7.9 High · Not analysed yet · Published 7 May 2026 · Tags: Server-side request forgery (SSRF), CWE-436
- [Azure Monitor Action Group Notification System Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-41105.md)
  `CVE-2026-41105` · CVE record: Microsoft Azure Monitor Action Group notification system · CVSS 8.1 High · Not analysed yet · Published 7 May 2026 · Tags: Server-side request forgery (SSRF)
- [nuxt-og-image SSRF — bypass of GHSA-pqhr-mp3f-hrpp / v6.2.5 fix (IPv6 + redirect)](https://agentprime.io/advisories/GHSA-c2rm-g55x-8hr5.md)
  `GHSA-c2rm-g55x-8hr5`, `CVE-2026-44589` · npm `nuxt-og-image`: affected `>=6.2.5, <6.4.9`, fixed in `6.4.9` · CVSS 3.7 Low · Not analysed yet · Published 7 May 2026 · Tags: Server-side request forgery (SSRF)
- [FreeScout vulnerable to SSRF via Helper::sanitizeRemoteUrl: redirect destination not re-validated, allowing internal HTTP / cloud-metadata access](https://agentprime.io/advisories/CVE-2026-41905.md)
  `CVE-2026-41905` · CVE record: freescout-help-desk freescout · CVSS 7.7 High · Not analysed yet · Published 7 May 2026 · Tags: Server-side request forgery (SSRF)

Newest: <https://agentprime.io/advisories/tag/ssrf.md>
Older: <https://agentprime.io/advisories/tag/ssrf.md?cursor=WyIyMDI2LTA1LTA3VDE4OjA4OjA5LjI3NzAwMFoiLCJDVkUtMjAyNi00MTkwNSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=ssrf&cursor=WyIyMDI2LTA1LTE4VDE0OjUxOjUxLjAwMDAwMFoiLCJHSFNBLTVydjUteGo1ai0zNDg0Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/ssrf/?cursor=WyIyMDI2LTA1LTE4VDE0OjUxOjUxLjAwMDAwMFoiLCJHSFNBLTVydjUteGo1ai0zNDg0Il0>. Everything for agents: <https://agentprime.io/llms.txt>.