# Server-side request forgery (SSRF).

The server made to send requests an attacker chooses. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Mailpit: Incomplete SSRF protection in Link Check API via IPv6 transition mechanisms](https://agentprime.io/advisories/GHSA-w4mc-hhc6-xp28.md)
  `GHSA-w4mc-hhc6-xp28`, `CVE-2026-55187`, `GO-2026-5688` · Go `github.com/axllent/mailpit`: affected `<1.30.2`, fixed in `1.30.2` · CVSS 5.8 Medium · Not analysed yet · Published 19 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Craft CMS: Blind SSRF and Arbitrary JavaScript Injection via Host Header Poisoning in actionResourceJs](https://agentprime.io/advisories/GHSA-c55v-343g-5xff.md)
  `GHSA-c55v-343g-5xff`, `CVE-2026-55791`, `PKSA-5xds-5mf3-ckxn` · Packagist `craftcms/cms`: affected `>=4.0.0-RC1, <4.18 || >=5.0.0-RC1, <5.10`, fixed in `4.18`, `5.10` · CVSS 6.9 Medium · Not analysed yet · Published 19 Jun 2026 · Tags: Cross-site scripting (XSS), Server-side request forgery (SSRF), CWE-346, CWE-644
- [Mercator CVE Configuration Vulnerable to Server-Side Request Forgery (SSRF)](https://agentprime.io/advisories/CVE-2026-49345.md)
  `CVE-2026-49345` · CVE record: sourcentis mercator · CVSS 5.3 Medium · Not analysed yet · Published 19 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Hugo: security.http.urls deny rules bypassed by alternate IPv4 encodings (SSRF)](https://agentprime.io/advisories/GHSA-r46f-3rpw-hxrv.md)
  `GHSA-r46f-3rpw-hxrv`, `CVE-2026-58404`, `GO-2026-5606` · Go `github.com/gohugoio/hugo`: affected `>=0.162.0, <0.163.1`, fixed in `0.163.1` · CVSS 4.6 Medium · Not analysed yet · Published 19 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Awx: automation-controller: awx: github webhook second-order ssrf via unvalidated statuses_url exfiltrates pat credential](https://agentprime.io/advisories/CVE-2026-12726.md)
  `CVE-2026-12726` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 · CVSS 6.3 Medium · Not analysed yet · Published 19 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [NL Portal Backend Libraries: Unauthenticated form resolver forwards the privileged Objecten-API token to a caller-supplied URL (SSRF)](https://agentprime.io/advisories/GHSA-xm3x-9cfw-jhx4.md)
  `GHSA-xm3x-9cfw-jhx4`, `CVE-2026-55414` · Maven `nl.nl-portal:form`: affected `>=1.1.0, <3.0.4`, fixed in `3.0.4` · CVSS 5.3 Medium · Not analysed yet · Published 19 Jun 2026 · Tags: Broken access control, Server-side request forgery (SSRF)
- [canto-saas-api: Authenticated API requests can be redirected via unencoded path variables](https://agentprime.io/advisories/GHSA-9qfv-wgh2-m6p8.md)
  `GHSA-9qfv-wgh2-m6p8`, `CVE-2026-55374`, `PKSA-j2jj-8zzq-m6yn` · Packagist `jleehr/canto-saas-api`: affected `<3.0.0`, fixed in `3.0.0` · CVSS 4.8 Medium · Not analysed yet · Published 19 Jun 2026 · Tags: Other injection, Server-side request forgery (SSRF)
- [Bit integrations <= 2.8.7 - Unauthenticated Server-Side Request Forgery via Form Field Upload Mapping](https://agentprime.io/advisories/CVE-2026-11989.md)
  `CVE-2026-11989` · CVE record: bitpressadmin Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation · CVSS 6.5 Medium · Not analysed yet · Published 19 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Advanced Import: One-Click Demo Import for WordPress <= 1.4.6 - Authenticated (Author+) Server-Side Request Forgery via 'demo_file' Parameter](https://agentprime.io/advisories/CVE-2026-4328.md)
  `CVE-2026-4328` · CVE record: addonspress Advanced Import · CVSS 6.4 Medium · Not analysed yet · Published 19 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Signal K Server: Server-Side Request Forgery via Remote Connection Endpoints](https://agentprime.io/advisories/GHSA-q59x-jc9f-gfqf.md)
  `GHSA-q59x-jc9f-gfqf`, `CVE-2026-55591` · npm `signalk-server`: affected `<2.28.0`, fixed in `2.28.0` · CVSS 5.8 Medium · Not analysed yet · Published 18 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [OpenClaw: Hostname checks could treat trailing-dot hosts inconsistently](https://agentprime.io/advisories/GHSA-gxg4-2rrr-jhc7.md)
  `GHSA-gxg4-2rrr-jhc7`, `CVE-2026-53859` · npm `openclaw`: affected `<2026.5.26`, fixed in `2026.5.26` · CVSS 6.0 Medium · Not analysed yet · Published 18 Jun 2026 · Tags: Server-side request forgery (SSRF), CWE-20, CWE-1023
- [Crawl4AI: Unauthenticated SSRF on the Docker server streaming crawl path (/crawl/stream)](https://agentprime.io/advisories/GHSA-wm69-2pc3-rmmf.md)
  `GHSA-wm69-2pc3-rmmf`, `CVE-2026-57573`, `PYSEC-2026-2140` · PyPI `crawl4ai`: affected `<0.9.0`, fixed in `0.9.0` · CVSS 8.6 High · Not analysed yet · Published 18 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [BBOT: Server-Side Request Forgery (SSRF) in docker_pull module via WWW-Authenticate realm parsing](https://agentprime.io/advisories/GHSA-3mp7-vp6j-2mxx.md)
  `GHSA-3mp7-vp6j-2mxx`, `CVE-2026-12566`, `PYSEC-2026-2391` · PyPI `bbot`: affected `>=2.0.0, <2.8.5`, fixed in `2.8.5` · CVSS 3.1 Low · Not analysed yet · Published 18 Jun 2026 · Tags: Server-side request forgery (SSRF), CWE-20
- [Nodemailer: Message-level raw option bypasses disableFileAccess/disableUrlAccess, enabling arbitrary file read and full-response SSRF in the delivered message](https://agentprime.io/advisories/GHSA-p6gq-j5cr-w38f.md)
  `GHSA-p6gq-j5cr-w38f`, `CVE-2026-82659` · npm `nodemailer`: affected `<9.0.1`, fixed in `9.0.1` · CVSS 7.1 High · Not analysed yet · Published 18 Jun 2026 · Tags: Path traversal, Server-side request forgery (SSRF)
- [PraisonAI: Server-Side Request Forgery (SSRF) in SearxNG / search_web tools via attacker-controlled searxng_url parameter](https://agentprime.io/advisories/GHSA-4pcv-mg8v-vrgf.md)
  `GHSA-4pcv-mg8v-vrgf`, `CVE-2026-57143`, `PYSEC-2026-3530` · PyPI `praisonaiagents`: affected `<1.6.61`, fixed in `1.6.61` · CVSS 8.8 High · Not analysed yet · Published 18 Jun 2026 · Tags: Server-side request forgery (SSRF), CWE-20
- [PraisonAI: Jobs webhook SSRF protection bypass via DNS rebinding](https://agentprime.io/advisories/GHSA-rjvw-7vvw-549v.md)
  `GHSA-rjvw-7vvw-549v`, `CVE-2026-57114`, `PYSEC-2026-3519` · PyPI `praisonai`: affected `>=4.5.126, <4.6.59`, fixed in `4.6.59` · CVSS 7.2 High · Not analysed yet · Published 18 Jun 2026 · Tags: Race condition, Server-side request forgery (SSRF)
- [praisonaiagents: SSRF guard validates literal IPs only and never resolves DNS](https://agentprime.io/advisories/GHSA-vxgj-xg5c-p4h7.md)
  `GHSA-vxgj-xg5c-p4h7`, `CVE-2026-57126`, `PYSEC-2026-3535` · PyPI `praisonaiagents`: affected `<1.6.59`, fixed in `1.6.59` · CVSS 8.5 High · Not analysed yet · Published 18 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [PraisonAI: SpiderTools redirect-target SSRF protection bypass](https://agentprime.io/advisories/GHSA-6h9p-93hq-q7h6.md)
  `GHSA-6h9p-93hq-q7h6`, `CVE-2026-57115`, `PYSEC-2026-3531` · PyPI `praisonaiagents`: affected `<1.6.59`, fixed in `1.6.59` · CVSS 6.5 Medium · Not analysed yet · Published 18 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Gotenberg: SSRF via LibreOffice document processing](https://agentprime.io/advisories/GHSA-2mrg-35hw-x3x9.md)
  `GHSA-2mrg-35hw-x3x9`, `CVE-2026-55229`, `GO-2026-5060` · Go `github.com/gotenberg/gotenberg/v8`: affected `<8.34.0`, fixed in `8.34.0` · CVSS 7.5 High · Not analysed yet · Published 18 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [ZITADEL: Server-Side Request Forgery (SSRF) and Denylist Bypass in Outgoing HTTP Components](https://agentprime.io/advisories/GHSA-29jh-8cfq-rr8x.md)
  `GHSA-29jh-8cfq-rr8x`, `CVE-2026-55671`, `GO-2026-5059` · Go `github.com/zitadel/zitadel`: affected `<1.80.0-v2.20.0.20260615133614-8e82ec1cb9a2`, fixed in `1.80.0-v2.20.0.20260615133614-8e82ec1cb9a2` · CVSS 2.3 Low · Not analysed yet · Published 18 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [CF7 to Webhook <= 5.0.0 - Unauthenticated Server-Side Request Forgery via CF7 Field Placeholder in Webhook URL Host](https://agentprime.io/advisories/CVE-2026-11395.md)
  `CVE-2026-11395` · CVE record: mariovalney CF7 to Webhook · CVSS 7.2 High · Not analysed yet · Published 18 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [TypeBot has SSRF in HTTP request and script fetch flows via DNS rebinding bypass](https://agentprime.io/advisories/CVE-2026-48764.md)
  `CVE-2026-48764` · CVE record: baptisteArno typebot.io · CVSS 8.2 High · Not analysed yet · Published 17 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [The Media module comes with support for oEmbed. The oEmbed specification contains two discovery mechanisms, via \`providers.json\` and via URL discovery.](https://agentprime.io/advisories/DRUPAL-CORE-2026-008.md)
  `DRUPAL-CORE-2026-008`, `BIT-drupal-2026-55807`, `CVE-2026-55807` · Packagist `drupal/core`: affected `<10.5.12 || >=10.6.0, <10.6.11 || >=11.0.0, <11.1.0 || >=11.1.0, <11.2.0 || >=11.2.0, <11.2.14 || >=11.3.0, <11.3.12`, fixed in `10.5.12`, `10.6.11`, `11.1.0`, `11.2.0`, `11.2.14`, `11.3.12` · CVSS 3.1 Low · Not analysed yet · Published 17 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Open WebUI: SSRF Protection Bypass in Playwright Web Loader via HTTP Redirects](https://agentprime.io/advisories/GHSA-jrfp-m64g-pcwv.md)
  `GHSA-jrfp-m64g-pcwv`, `CVE-2026-54018`, `PYSEC-2026-2743` · PyPI `open-webui`: affected `<0.9.6`, fixed in `0.9.6` · CVSS 7.7 High · Not analysed yet · Published 17 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Open WebUI: Path traversal / SSRF in terminal server proxy via encoded path traversal](https://agentprime.io/advisories/GHSA-r2wg-2mcr-66rv.md)
  `GHSA-r2wg-2mcr-66rv`, `CVE-2026-54017`, `PYSEC-2026-2751` · PyPI `open-webui`: affected `<0.9.6`, fixed in `0.9.6` · CVSS 7.7 High · Not analysed yet · Published 17 Jun 2026 · Tags: Path traversal, Server-side request forgery (SSRF)
- [Open WebUI: Redirect-Bypass SSRF in OAuth \`\_process_picture_url\` (incomplete-fix sibling of CVE-2026-45401)](https://agentprime.io/advisories/GHSA-226f-f24g-524w.md)
  `GHSA-226f-f24g-524w`, `CVE-2026-54008`, `PYSEC-2026-2690` · PyPI `open-webui`: affected `<0.9.6`, fixed in `0.9.6` · CVSS 8.5 High · Not analysed yet · Published 17 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [NocoDB: Server-Side Request Forgery via Spreadsheet Import Endpoint](https://agentprime.io/advisories/GHSA-hmcr-rmjq-47qr.md)
  `GHSA-hmcr-rmjq-47qr`, `CVE-2026-53931` · npm `nocodb`: affected `<=0.301.3`, no fixed version yet · CVSS 6.9 Medium · Not analysed yet · Published 17 Jun 2026 · Tags: Server-side request forgery (SSRF), CWE-441
- [NocoDB: Server-Side Request Forgery via Base Migration URL](https://agentprime.io/advisories/GHSA-h6vv-pcq8-7xm4.md)
  `GHSA-h6vv-pcq8-7xm4`, `CVE-2026-53930` · npm `nocodb`: affected `<=0.301.3`, no fixed version yet · CVSS 5.1 Medium · Not analysed yet · Published 17 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [NocoDB: Server-Side Request Forgery via Spreadsheet Fetch URL](https://agentprime.io/advisories/GHSA-gprh-27j3-g5h4.md)
  `GHSA-gprh-27j3-g5h4`, `CVE-2026-53927` · npm `nocodb`: affected `<=0.301.3`, no fixed version yet · CVSS 5.1 Medium · Not analysed yet · Published 17 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Duplicate Advisory: Hostname checks could treat trailing-dot hosts inconsistently](https://agentprime.io/advisories/GHSA-vqx6-6j84-2794.md)
  `GHSA-vqx6-6j84-2794` · npm `openclaw`: affected `<=2026.5.22`, no fixed version yet · CVSS 6.5 Medium · Withdrawn · Not analysed yet · Published 16 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Crawl4AI: SSRF via proxy settings in the Docker server bypasses the crawl-URL SSRF check](https://agentprime.io/advisories/GHSA-6qhc-x826-342c.md)
  `GHSA-6qhc-x826-342c`, `CVE-2026-53755`, `PYSEC-2026-588` · PyPI `crawl4ai`: affected `<0.8.9`, fixed in `0.8.9` · CVSS 8.6 High · Not analysed yet · Published 16 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Crawl4AI: LLM credential exfiltration in Docker server via request base_url and env: token resolution](https://agentprime.io/advisories/GHSA-f989-c77f-r2cq.md)
  `GHSA-f989-c77f-r2cq`, `CVE-2026-56259`, `PYSEC-2026-3448` · PyPI `crawl4ai`: affected `<0.8.8`, fixed in `0.8.8` · CVSS 8.8 High · Not analysed yet · Published 16 Jun 2026 · Tags: Information disclosure, Hard-coded credentials, Server-side request forgery (SSRF)
- [Crawl4AI: SSRF filter bypass in Docker server via IPv6 transition forms (NAT64 / 6to4 / unspecified / v4-mapped)](https://agentprime.io/advisories/GHSA-4qqr-vv2q-cmr5.md)
  `GHSA-4qqr-vv2q-cmr5`, `CVE-2026-53754`, `PYSEC-2026-587` · PyPI `crawl4ai`: affected `<0.8.8`, fixed in `0.8.8` · CVSS 7.5 High · Not analysed yet · Published 16 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [LobeHub: Unauthenticated SSRF in \`/webapi/proxy\`](https://agentprime.io/advisories/GHSA-xmwj-c75x-6346.md)
  `GHSA-xmwj-c75x-6346`, `CVE-2026-54157` · npm `@lobehub/lobehub`: affected `<2.1.57`, fixed in `2.1.57` · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution](https://agentprime.io/advisories/GHSA-365w-hqf6-vxfg.md)
  `GHSA-365w-hqf6-vxfg`, `CVE-2026-56260`, `CVE-2026-56261`, `CVE-2026-56262`, `CVE-2026-56263`, `CVE-2026-56264`, `CVE-2026-56265`, `CVE-2026-56266`, `GHSA-53rg-46cm-4g2v`, `GHSA-8qrg-7j2f-rf2h`, `GHSA-f23g-2f38-gg94`, `GHSA-g2pv-76hm-j4x9`, `GHSA-r9hw-78q5-478g`, `GHSA-xrfj-6m49-wfmm`, `PYSEC-2026-229`, `PYSEC-2026-230`, `PYSEC-2026-239`, `PYSEC-2026-3443`, `PYSEC-2026-3449`, `PYSEC-2026-596`, `PYSEC-2026-798` · PyPI `crawl4ai`: affected `<0.8.7`, fixed in `0.8.7` · CVSS 8.8 High · Not analysed yet · Published 16 Jun 2026 · Tags: Path traversal, Cross-site scripting (XSS), Code injection, Authentication bypass
- [Hugo: security.http.urls allow-list bypass via HTTP redirects](https://agentprime.io/advisories/GHSA-vxgm-5rmg-5w8g.md)
  `GHSA-vxgm-5rmg-5w8g`, `CVE-2026-50134`, `GO-2026-5681` · Go `github.com/gohugoio/hugo`: affected `>=0.91.0, <0.162.0`, fixed in `0.162.0` · CVSS 6.3 Medium · Not analysed yet · Published 16 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Deno: WebSocket API sandbox bypass via missing post-DNS check](https://agentprime.io/advisories/GHSA-83pc-3rw9-qpwj.md)
  `GHSA-83pc-3rw9-qpwj`, `CVE-2026-49860` · crates.io `deno`: affected `<2.8.1`, fixed in `2.8.1` · CVSS 5.2 Medium · Not analysed yet · Published 16 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Deno: \`fetch()\` API sandbox bypass via missing DNS resolution check](https://agentprime.io/advisories/GHSA-cpgj-f7g3-2pp2.md)
  `GHSA-cpgj-f7g3-2pp2`, `CVE-2026-49859` · crates.io `deno`: affected `<2.8.1`, fixed in `2.8.1` · CVSS 5.2 Medium · Not analysed yet · Published 16 Jun 2026 · Tags: Server-side request forgery (SSRF), CWE-693
- [phpseclib: X.509 certificate validation sends attacker-controlled outbound requests (server-side request forgery) via Authority Information Access](https://agentprime.io/advisories/GHSA-m557-wrgg-6rp4.md)
  `GHSA-m557-wrgg-6rp4`, `CVE-2026-55599`, `PKSA-432p-hv1d-chf7` · Packagist `phpseclib/phpseclib`: affected `>=0.1.1, <1.0.30 || >=2.0.0, <2.0.55 || >=3.0.0, <3.0.54`, fixed in `1.0.30`, `2.0.55`, `3.0.54` · CVSS 5.8 Medium · Not analysed yet · Published 16 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Astro: Host header SSRF in prerendered error page fetch](https://agentprime.io/advisories/GHSA-2pvr-wf23-7pc7.md)
  `GHSA-2pvr-wf23-7pc7`, `CVE-2026-54299` · npm `astro`: affected `<6.4.6`, fixed in `6.4.6` · CVSS 7.5 High · Not analysed yet · Published 16 Jun 2026 · Tags: Server-side request forgery (SSRF), CWE-20
- [@astrojs/netlify broadens Astro image.remotePatterns in Netlify Image CDN config](https://agentprime.io/advisories/GHSA-529g-xq4f-cw38.md)
  `GHSA-529g-xq4f-cw38`, `CVE-2026-54300` · npm `@astrojs/netlify`: affected `<7.0.13`, fixed in `7.0.13` · CVSS 5.3 Medium · Not analysed yet · Published 16 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [shlink has a Server-Side Request Forgery issue](https://agentprime.io/advisories/GHSA-p85r-x2wj-mxqj.md)
  `GHSA-p85r-x2wj-mxqj`, `CVE-2026-50887`, `PKSA-wdxh-t7c7-2k2p` · Packagist `shlinkio/shlink`: affected `<=5.0.1`, no fixed version yet · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Koillection has an authenticated Server-Side Request Forgery issue](https://agentprime.io/advisories/GHSA-gmxh-hjfv-qc2w.md)
  `GHSA-gmxh-hjfv-qc2w`, `CVE-2026-50888`, `PKSA-r52z-frv4-qfxy` · Packagist `koillection/koillection`: affected `<1.8.4`, fixed in `1.8.4` · CVSS 8.1 High · Not analysed yet · Published 15 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress PopAd Plugin <= 1.0.4 - Server Side Request Forgery (SSRF) Vulnerability](https://agentprime.io/advisories/CVE-2025-60175.md)
  `CVE-2025-60175` · CVE record: vynnus PopAd · CVSS 4.4 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows](https://agentprime.io/advisories/GHSA-wqp7-x3pw-xc5r.md)
  `GHSA-wqp7-x3pw-xc5r`, `CVE-2026-48818`, `PYSEC-2026-2281` · PyPI `starlette`: affected `<1.1.0`, fixed in `1.1.0` · CVSS 7.5 High · Not analysed yet · Published 15 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [PyJWKClient: missing scheme allowlist enables CVE-2024-21643-class SSRF + token forgery via file://, ftp\://, data: schemes](https://agentprime.io/advisories/GHSA-993g-76c3-p5m4.md)
  `GHSA-993g-76c3-p5m4`, `CVE-2026-48522`, `PYSEC-2026-175` · PyPI `pyjwt`: affected `>=2.0.0, <2.13.0`, fixed in `2.13.0` · CVSS 4.2 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Server-side request forgery (SSRF), CWE-441
- [Symfony: IpUtils::PRIVATE_SUBNETS Omits IPv6 Transition Forms (6to4, NAT64, Teredo, IPv4-compatible): SSRF Bypass in NoPrivateNetworkHttpClient](https://agentprime.io/advisories/GHSA-38cx-cq6f-5755.md)
  `GHSA-38cx-cq6f-5755`, `CVE-2026-48736`, `PKSA-35by-yxtt-jc85`, `PKSA-bd71-n14y-wh1d`, `PKSA-y6py-qpv1-h52p` · Packagist `symfony/http-client` and 2 more: affected `>=5.4.0, <5.4.53`, fixed in `5.4.53` · CVSS 6.9 Medium · Not analysed yet · Published 15 Jun 2026 · Tags: Server-side request forgery (SSRF), CWE-184
- [@angular/platform-server: URL Parser Differential leading to SSRF Allowlist Bypass](https://agentprime.io/advisories/GHSA-xrxm-cp7j-8xf6.md)
  `GHSA-xrxm-cp7j-8xf6`, `CVE-2026-50168` · npm `@angular/platform-server`: affected `<=18.2.14 || >=19.0.0-next.0, <19.2.23 || >=20.0.0-next.0, <20.3.22 || >=21.0.0-next.0, <21.2.15 || >=22.0.0-next.0, <22.0.0-rc.2`, fixed in `19.2.23`, `20.3.22`, `21.2.15`, `22.0.0-rc.2` · CVSS 8.8 High · Not analysed yet · Published 15 Jun 2026 · Tags: Server-side request forgery (SSRF), CWE-346
- [Duplicate Advisory: utcp-gql SSRF: CVE-2026-44661 fix not applied to the GraphQL and WebSocket plugins](https://agentprime.io/advisories/GHSA-vg9f-q4xh-62r4.md)
  `GHSA-vg9f-q4xh-62r4` · PyPI `utcp-gql`: affected `<=1.1.0`, no fixed version yet · CVSS 6.3 Medium · Withdrawn · Not analysed yet · Published 15 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Budibase: Unvalidated VectorDB Host Parameter Enables SSRF](https://agentprime.io/advisories/GHSA-cv96-5348-p5p8.md)
  `GHSA-cv96-5348-p5p8`, `CVE-2026-48148` · npm `@budibase/server`: affected `<3.35.3`, fixed in `3.35.3` · CVSS 5.3 Medium · Not analysed yet · Published 12 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [GeoServer has a Server-Side Request Forgery (SSRF) Vulnerability in its XML Entity Resolution](https://agentprime.io/advisories/GHSA-x4r9-gmw3-hxww.md)
  `GHSA-x4r9-gmw3-hxww`, `CVE-2025-58175` · Maven `org.geoserver:gs-main` and 1 more: affected `<2.26.4 || >=2.27.0, <2.27.3`, fixed in `2.26.4`, `2.27.3` · CVSS 6.5 Medium · Not analysed yet · Published 12 Jun 2026 · Tags: XML external entities (XXE), Server-side request forgery (SSRF), CWE-20
- [Budibase: SSRF via OAuth2 Config Validation — Missing fetchWithBlacklist Protection](https://agentprime.io/advisories/GHSA-g6qx-g4pr-92v7.md)
  `GHSA-g6qx-g4pr-92v7`, `CVE-2026-48146` · npm `@budibase/server`: affected `<3.39.0`, fixed in `3.39.0` · CVSS 7.7 High · Not analysed yet · Published 12 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Budibase: SSRF via User-Controlled queryId in Automation Execute Query Step](https://agentprime.io/advisories/GHSA-6964-pp88-6wp9.md)
  `GHSA-6964-pp88-6wp9`, `CVE-2026-48128` · npm `budibase`: affected `<3.39.0`, fixed in `3.39.0` · CVSS 5.1 Medium · Not analysed yet · Published 12 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [@steipete/summarize vulnerable to SSRF via podcast:transcript URL fetch](https://agentprime.io/advisories/GHSA-3vx2-vqx8-jxfg.md)
  `GHSA-3vx2-vqx8-jxfg`, `CVE-2026-53782` · npm `@steipete/summarize`: affected `<0.17.0`, fixed in `0.17.0` · CVSS 6.3 Medium · Not analysed yet · Published 11 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Garlic-Hub: SSRF vulnerability in uploadFromUrl endpoint](https://agentprime.io/advisories/CVE-2026-47170.md)
  `CVE-2026-47170` · CVE record: garlic-signage garlic-hub · CVSS 7.7 High · Not analysed yet · Published 11 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Fediverse Embeds: Unauthenticated SSRF / open proxy via REST media-proxy endpoint](https://agentprime.io/advisories/CVE-2026-46697.md)
  `CVE-2026-46697` · CVE record: stefanbohacek fediverse-embeds-wordpress-plugin · CVSS 7.5 High · Not analysed yet · Published 11 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Fediverse Embeds: Public-nonce SSRF via ftf_get_site_info AJAX action](https://agentprime.io/advisories/CVE-2026-46698.md)
  `CVE-2026-46698` · CVE record: stefanbohacek fediverse-embeds-wordpress-plugin · CVSS 5.3 Medium · Not analysed yet · Published 11 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Kolibri has Unauthenticated Server-Side Request Forgery (SSRF) in RemoteFacilityUserViewset](https://agentprime.io/advisories/GHSA-4mj9-pf4r-cqrc.md)
  `GHSA-4mj9-pf4r-cqrc`, `CVE-2026-48053`, `PYSEC-2026-2554` · PyPI `kolibri`: affected `<0.19.4`, fixed in `0.19.4` · CVSS 5.8 Medium · Not analysed yet · Published 11 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [IBM Langflow Desktop 1.0.0 - 1.9.2 DNS Rebinding Bypasses SSRF Protection Allowing Access to Internal Services](https://agentprime.io/advisories/CVE-2026-3341.md)
  `CVE-2026-3341` · CVE record: IBM Langflow Desktop · CVSS 5.4 Medium · Not analysed yet · Published 11 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [guzzlehttp/psr7 has Host Confusion via Authority Reinterpretation](https://agentprime.io/advisories/GHSA-34xg-wgjx-8xph.md)
  `GHSA-34xg-wgjx-8xph`, `CVE-2026-48998`, `PKSA-jj5t-2zs1-dcfm` · Packagist `guzzlehttp/psr7`: affected `<2.10.2`, fixed in `2.10.2` · CVSS 5.3 Medium · Not analysed yet · Published 11 Jun 2026 · Tags: Server-side request forgery (SSRF), CWE-20

Newest: <https://agentprime.io/advisories/tag/ssrf.md>
Older: <https://agentprime.io/advisories/tag/ssrf.md?cursor=WyIyMDI2LTA2LTExVDEzOjA0OjUzLjAwMDAwMFoiLCJHSFNBLTM0eGctd2dqeC04eHBoIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=ssrf&cursor=WyIyMDI2LTA2LTE5VDIxOjQyOjQ2LjAwMDAwMFoiLCJHSFNBLW1ydngtam1qdy12Z2djIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/ssrf/?cursor=WyIyMDI2LTA2LTE5VDIxOjQyOjQ2LjAwMDAwMFoiLCJHSFNBLW1ydngtam1qdy12Z2djIl0>. Everything for agents: <https://agentprime.io/llms.txt>.