# Server-side request forgery (SSRF).

The server made to send requests an attacker chooses. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Snowflake CLI Server-Side Request Forgery via Arbitrary URL Fetch in !source/!load](https://agentprime.io/advisories/CVE-2026-13751.md)
  `CVE-2026-13751` · CVE record: Snowflake Snowflake CLI · CVSS 4.1 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Server-side request forgery (SSRF), CWE-829
- [Lemur: ACME SSRF + creator-equality IDOR lead to AWS IAM/PKI compromise](https://agentprime.io/advisories/GHSA-v2wp-frmc-5q3v.md)
  `GHSA-v2wp-frmc-5q3v`, `CVE-2026-55166`, `PYSEC-2026-384` · PyPI `lemur`: affected `<1.9.2`, fixed in `1.9.2` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jun 2026 · Tags: Broken access control, Server-side request forgery (SSRF)
- [pyLoad: SSRF filter bypass via HTTP redirect in BaseDownloader (Incomplete fix for CVE-2026-33992)](https://agentprime.io/advisories/GHSA-7gvf-3w72-p2pg.md)
  `GHSA-7gvf-3w72-p2pg`, `CVE-2026-35459`, `PYSEC-2026-495` · PyPI `pyload-ng`: affected `<=0.5.0b3.dev96`, no fixed version yet · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [pyLoad: Server-Side Request Forgery via Download Link Submission Enables Cloud Metadata Exfiltration](https://agentprime.io/advisories/GHSA-m74m-f7cr-432x.md)
  `GHSA-m74m-f7cr-432x`, `CVE-2026-33992`, `PYSEC-2026-497` · PyPI `pyload-ng`: affected `<=0.5.0b3.dev96`, no fixed version yet · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [MLflow Server-Side Request Forgery (SSRF)](https://agentprime.io/advisories/GHSA-59v3-898r-qwhj.md)
  `GHSA-59v3-898r-qwhj`, `BIT-mlflow-2023-6974`, `CVE-2023-6974`, `PYSEC-2026-416` · PyPI `mlflow`: affected `<2.9.2`, fixed in `2.9.2` · CVSS 8.6 High · Not analysed yet · Published 29 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [GitBucket RepositoryCreationService.scala Git.cloneRepository.setURI server-side request forgery](https://agentprime.io/advisories/CVE-2026-13540.md)
  `CVE-2026-13540` · CVE record: GitBucket · CVSS 5.3 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Statamic Vulnerable to Server-Side Request Forgery via Glide (DNS rebinding)](https://agentprime.io/advisories/GHSA-v5c4-wcpj-x73m.md)
  `GHSA-v5c4-wcpj-x73m`, `CVE-2026-54242`, `PKSA-9vds-c3yh-rq22` · Packagist `statamic/cms`: affected `<5.73.24 || >=6.0.0, <6.20.1`, fixed in `5.73.24`, `6.20.1` · CVSS 4.9 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Race condition, Server-side request forgery (SSRF)
- [PhpWeasyPrint vulnerable to SSRF and local file disclosure via the attachment option](https://agentprime.io/advisories/GHSA-x8g9-h984-pc36.md)
  `GHSA-x8g9-h984-pc36`, `CVE-2026-49359`, `PKSA-q4hm-4pvf-f13w` · Packagist `pontedilana/php-weasyprint`: affected `<2.6.0`, fixed in `2.6.0` · CVSS 6.5 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Aimeos Pagible CMS vulnerable to Server Side Request Forgery (SSRF) via DNS rebinding in admin proxy](https://agentprime.io/advisories/GHSA-mmj8-wcvw-6789.md)
  `GHSA-mmj8-wcvw-6789`, `CVE-2026-49262`, `PKSA-85r2-kyxr-cpv8` · Packagist `aimeos/pagible`: affected `<0.10.4`, fixed in `0.10.4` · CVSS 3.0 Low · Not analysed yet · Published 26 Jun 2026 · Tags: Race condition, Server-side request forgery (SSRF)
- [@cardano402/mcp-server missing spending limits, LAN-exposed HTTP transport, and SSRF via catalog.server.url](https://agentprime.io/advisories/GHSA-rp72-5v5q-2446.md)
  `GHSA-rp72-5v5q-2446` · npm `@cardano402/mcp-server`: affected `<0.1.2`, fixed in `0.1.2` · CVSS 0.0 None · Not analysed yet · Published 26 Jun 2026 · Tags: Path traversal, Denial of service, Broken access control, Server-side request forgery (SSRF)
- [Kestra: Unauthenticated Remote Code Execution via Authentication Bypass in \`AuthenticationFilter\`](https://agentprime.io/advisories/CVE-2026-49869.md)
  `CVE-2026-49869` · CVE record: kestra-io kestra · CVSS 10.0 Critical · Critical (KEV, CVSS 9+) · In CISA KEV · Not analysed yet · Published 26 Jun 2026 · Tags: Command injection, Authentication bypass, Server-side request forgery (SSRF), CWE-184
- [Hysteria has an authenticated UDP ACL bypass that enables localhost and private-network UDP SSRF](https://agentprime.io/advisories/GHSA-vgrc-hq28-p3xp.md)
  `GHSA-vgrc-hq28-p3xp`, `GO-2026-5809` · Go `github.com/apernet/hysteria/core/v2`: affected `>=2.0.0, <2.9.2`, fixed in `2.9.2` · CVSS 7.4 High · Not analysed yet · Published 26 Jun 2026 · Tags: Broken access control, Server-side request forgery (SSRF)
- [pydantic-ai: SSRF blocklist bypass via IPv4-compatible, SIIT/IVI, and local NAT64 IPv6 addresses (incomplete fix of CVE-2026-46678)](https://agentprime.io/advisories/GHSA-cg7w-rg45-pc59.md)
  `GHSA-cg7w-rg45-pc59`, `CVE-2026-48782`, `PYSEC-2026-2977`, `PYSEC-2026-2981` · PyPI `pydantic-ai` and 1 more: affected `>=1.56.0, <1.102.0 || >=2.0.0b1, <2.0.0b3`, fixed in `1.102.0`, `2.0.0b3` · CVSS 6.8 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Fluentd is Vulnerable to Server-Side Request Forgery (SSRF) via Placeholder Expansion in \`out_http\`](https://agentprime.io/advisories/GHSA-72f5-rr8c-r6gr.md)
  `GHSA-72f5-rr8c-r6gr`, `BIT-fluentd-2026-44161`, `CVE-2026-44161` · RubyGems `fluentd`: affected `<1.19.3`, fixed in `1.19.3` · CVSS 7.2 High · Not analysed yet · Published 26 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [AutoGPT: SSRF-to-RCE Chain in \`SendWebRequestBlock\` via IP validation bypass and internal \`pg-meta\` access](https://agentprime.io/advisories/CVE-2026-56663.md)
  `CVE-2026-56663` · CVE record: Significant-Gravitas AutoGPT · CVSS 8.5 High · Not analysed yet · Published 26 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress Kirki plugin <= 6.0.11 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-57627.md)
  `CVE-2026-57627` · CVE record: Themeum Kirki · CVSS 4.9 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress utm.codes plugin <= 1.9.0 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-56026.md)
  `CVE-2026-56026` · CVE record: Chris Carlevato utm.codes · CVSS 6.4 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [SSRF via unvalidated attachment URLs in Mattermost Agents plugin MCP server](https://agentprime.io/advisories/CVE-2026-4339.md)
  `CVE-2026-4339` · CVE record: Mattermost Mattermost · CVSS 6.5 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in danpros HTMLy](https://agentprime.io/advisories/CVE-2026-57940.md)
  `CVE-2026-57940` · CVE record: danpros HTMLy · CVSS 2.1 Low · Not analysed yet · Published 26 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Unauthenticated Server-Side Request Forgery via WS-Addressing in WSO2 API Manager](https://agentprime.io/advisories/CVE-2026-2053.md)
  `CVE-2026-2053` · CVE record: WSO2 WSO2 API Manager · CVSS 8.3 High · Not analysed yet · Published 26 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Server-Side Cross-Site Scripting and SSRF in Rapid7 InsightConnect Markdown to PDF Plugin](https://agentprime.io/advisories/CVE-2026-8661.md)
  `CVE-2026-8661` · CVE record: Rapid7 InsightConnect Markdown Plugin · CVSS 4.8 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Cross-site scripting (XSS), Server-side request forgery (SSRF)
- [KubeVirt virt-api port-forward handler vulnerable to SSRF via guest-controlled VMI IP address](https://agentprime.io/advisories/GHSA-cgm6-wvp9-4g5h.md)
  `GHSA-cgm6-wvp9-4g5h`, `CVE-2026-13318` · Go `kubevirt.io/kubevirt`: affected `<1.10.0-rc.0`, fixed in `1.10.0-rc.0` · CVSS 6.4 Medium · Not analysed yet · Published 26 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Apicurio Registry allows upload of WSDL raising HTTP request](https://agentprime.io/advisories/GHSA-rcmh-vfq7-8gf4.md)
  `GHSA-rcmh-vfq7-8gf4`, `CVE-2026-12992` · Maven `io.apicurio:apicurio-registry-schema-util-wsdl`: affected `>=3.3.0, <3.3.1 || <3.2.6`, fixed in `3.3.1`, `3.2.6` · CVSS 7.4 High · Not analysed yet · Published 26 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Lemur: Crafted CRL/OCSP URLs in uploaded certificates lead to post-authentication SSRF](https://agentprime.io/advisories/GHSA-54vg-pfh7-jq95.md)
  `GHSA-54vg-pfh7-jq95`, `CVE-2026-55162`, `PYSEC-2026-2586` · PyPI `lemur`: affected `<1.9.2`, fixed in `1.9.2` · CVSS 6.3 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [OHIF Viewers DICOM Server-Side request forgery](https://agentprime.io/advisories/CVE-2026-12473.md)
  `CVE-2026-12473` · CVE record: Open Health Imaging Foundation (OHIF) DICOM Web Viewer Framework · CVSS 8.3 High · Not analysed yet · Published 25 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [MaxKB < 2.10.0 - Server-Side Request Forgery via downloadCallbackUrl and download_url Parameters](https://agentprime.io/advisories/CVE-2026-56779.md)
  `CVE-2026-56779` · CVE record: 1Panel-dev MaxKB · CVSS 5.3 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [NewsBlur < 14.5.0 - Server-Side Request Forgery via add_url Endpoint](https://agentprime.io/advisories/CVE-2026-56771.md)
  `CVE-2026-56771` · CVE record: samuelclay NewsBlur · CVSS 6.3 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Huly Platform - Server-Side Request Forgery via /import Endpoint](https://agentprime.io/advisories/CVE-2026-56769.md)
  `CVE-2026-56769` · CVE record: hcengineering platform · CVSS 6.3 Medium · Not analysed yet · Published 25 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [ToolJet Cloud - SSRF to Azure Cloud Infrastructure Compromise](https://agentprime.io/advisories/CVE-2026-55412.md)
  `CVE-2026-55412` · CVE record: ToolJet ToolJet · CVSS 8.3 High · Not analysed yet · Published 25 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [LibreChat: SSRF via User-Provided Custom Endpoint baseURL — no private IP validation on user-configured API base URLs](https://agentprime.io/advisories/CVE-2026-54033.md)
  `CVE-2026-54033` · CVE record: danny-avila LibreChat · CVSS 7.7 High · Not analysed yet · Published 25 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Appsmith: SSRF via \`POST /api/v1/admin/send-test-email\` — JavaMail Bypasses WebClient IP Filter](https://agentprime.io/advisories/CVE-2026-49979.md)
  `CVE-2026-49979` · CVE record: appsmithorg appsmith · CVSS 5.1 Medium · Not analysed yet · Published 24 Jun 2026 · Tags: Information disclosure, Server-side request forgery (SSRF)
- [Appsmith: SSRF in REST API / GraphQL datasource plugins via insufficient host denylist](https://agentprime.io/advisories/CVE-2026-55455.md)
  `CVE-2026-55455` · CVE record: appsmithorg appsmith · CVSS 5.3 Medium · Not analysed yet · Published 24 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Appsmith: RCE via Supervisord XML-RPC Admin Interface Exposed via /supervisor Caddy Route](https://agentprime.io/advisories/CVE-2026-50189.md)
  `CVE-2026-50189` · CVE record: appsmithorg appsmith · CVSS 8.9 High · Not analysed yet · Published 24 Jun 2026 · Tags: Server-side request forgery (SSRF), CWE-183
- [Mastodon: SSRF protection bypass on older Ruby versions](https://agentprime.io/advisories/CVE-2026-47389.md)
  `CVE-2026-47389` · CVE record: mastodon mastodon · CVSS 8.6 High · Not analysed yet · Published 24 Jun 2026 · Tags: Information disclosure, Server-side request forgery (SSRF), CWE-184
- [Mastodon: SSRF Bypass via IPv6 Unspecified Address (::)](https://agentprime.io/advisories/CVE-2026-46348.md)
  `CVE-2026-46348` · CVE record: mastodon mastodon · CVSS 8.7 High · Not analysed yet · Published 24 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Payara Server Full has a Cross-Site Request Forgery vulnerability](https://agentprime.io/advisories/GHSA-x939-7fq5-v9v6.md)
  `GHSA-x939-7fq5-v9v6`, `CVE-2026-12986` · Maven `fish.payara.distributions:payara`: affected `>=4.0.0, <7.2026.6`, fixed in `7.2026.6` · CVSS 7.3 High · Not analysed yet · Published 24 Jun 2026 · Tags: Cross-site request forgery (CSRF), Server-side request forgery (SSRF)
- [Jenkins Assembla Plugin has an XXE vulnerability](https://agentprime.io/advisories/GHSA-2q27-6p2h-q6r3.md)
  `GHSA-2q27-6p2h-q6r3`, `CVE-2026-57303` · Maven `org.jenkins-ci.plugins:assembla`: affected `<=1.4`, no fixed version yet · CVSS 7.1 High · Not analysed yet · Published 24 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [SSRF in Pentestify PDF generation endpoint via Host header](https://agentprime.io/advisories/CVE-2026-13150.md)
  `CVE-2026-13150` · CVE record: Pentestify Pentestify · CVSS 6.9 Medium · Not analysed yet · Published 24 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Kargo Takip <= 1.2 - Unauthenticated Server-Side Request Forgery via 'api_url' Parameter](https://agentprime.io/advisories/CVE-2026-12095.md)
  `CVE-2026-12095` · CVE record: bytuncay Kargo Takip · CVSS 7.2 High · Not analysed yet · Published 24 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [WP Meta SEO <= 4.5.18 - Authenticated (Contributor+) Server-Side Request Forgery via 'new_link' Parameter](https://agentprime.io/advisories/CVE-2026-11370.md)
  `CVE-2026-11370` · CVE record: joomunited WP Meta SEO · CVSS 6.4 Medium · Not analysed yet · Published 24 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [URL Preview <= 1.0 - Unauthenticated Server-Side Request Forgery via 'url' Parameter](https://agentprime.io/advisories/CVE-2026-12100.md)
  `CVE-2026-12100` · CVE record: abhisheksaha11 URL Preview · CVSS 7.2 High · Not analysed yet · Published 24 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [jackson-databind: InetSocketAddress deserialization triggers eager DNS resolution (SSRF)](https://agentprime.io/advisories/GHSA-hgj6-7826-r7m5.md)
  `GHSA-hgj6-7826-r7m5`, `CVE-2026-54514` · Maven `com.fasterxml.jackson.core:jackson-databind` and 1 more: affected `>=2.0.0, <2.18.8 || >=2.19.0, <2.21.4`, fixed in `2.18.8`, `2.21.4` · CVSS 5.3 Medium · Not analysed yet · Published 23 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Gogs has a Migration Redirect Bypass that Leads to Internal Repository Theft](https://agentprime.io/advisories/GHSA-g2f5-gjr4-qjvm.md)
  `GHSA-g2f5-gjr4-qjvm`, `CVE-2026-52805`, `GO-2026-5387` · Go `gogs.io/gogs`: affected `<0.14.3`, fixed in `0.14.3` · CVSS 8.7 High · Not analysed yet · Published 23 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Duplicate Advisory: Flowise Execute Flow function has an SSRF vulnerability](https://agentprime.io/advisories/GHSA-w4hm-rrxg-pxcf.md)
  `GHSA-w4hm-rrxg-pxcf` · npm `flowise`: affected `<3.1.0`, fixed in `3.1.0` · CVSS 7.1 High · Withdrawn · Not analysed yet · Published 23 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [@budibase/backend-core has potential SSRF DNS rebinding bypass in outbound fetch validation](https://agentprime.io/advisories/GHSA-gfq7-5x4g-3xhf.md)
  `GHSA-gfq7-5x4g-3xhf`, `CVE-2026-54353` · npm `@budibase/backend-core`: affected `<3.39.9`, fixed in `3.39.9` · CVSS 8.5 High · Not analysed yet · Published 22 Jun 2026 · Tags: Race condition, Server-side request forgery (SSRF)
- [Budibase: SSRF via OAuth2 token endpoint URL reaches internal hosts and cloud metadata](https://agentprime.io/advisories/GHSA-4q6h-8p4v-67vq.md)
  `GHSA-4q6h-8p4v-67vq`, `CVE-2026-48153` · npm `@budibase/server`: affected `<3.39.0`, fixed in `3.39.0` · CVSS 8.5 High · Not analysed yet · Published 22 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Gogs has SSRF in webhook deliveries](https://agentprime.io/advisories/GHSA-c4v7-xg93-qf8g.md)
  `GHSA-c4v7-xg93-qf8g`, `CVE-2026-47267`, `GO-2026-5312` · Go `gogs.io/gogs`: affected `<0.14.3`, fixed in `0.14.3` · CVSS 8.3 High · Not analysed yet · Published 22 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Paymenter has Blind Unauthenticated SSRF on the Paypal gateway module](https://agentprime.io/advisories/GHSA-7wwh-xcc3-9fcg.md)
  `GHSA-7wwh-xcc3-9fcg`, `CVE-2026-44583`, `PKSA-scs3-cd2n-yh78` · Packagist `paymenter/paymenter`: affected `<1.5.0`, fixed in `1.5.0` · CVSS 5.3 Medium · Not analysed yet · Published 22 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [OpenAM Authenticated Server-Side Request Forgery (SSRF) via \`/sessionservice\`](https://agentprime.io/advisories/GHSA-c556-q2mh-477v.md)
  `GHSA-c556-q2mh-477v`, `CVE-2026-44202` · Maven `org.openidentityplatform.openam:openam-core`: affected `<16.1.1`, fixed in `16.1.1` · CVSS 5.3 Medium · Not analysed yet · Published 22 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [OpenCTI has Semi-Blind SSRF via Unvalidated External URL in Data Ingestion Feature](https://agentprime.io/advisories/GHSA-ffm6-vvph-g5f5.md)
  `GHSA-ffm6-vvph-g5f5`, `CVE-2026-21887`, `PYSEC-2026-118` · PyPI `pycti`: affected `<6.8.16`, fixed in `6.8.16` · CVSS 7.7 High · Not analysed yet · Published 22 Jun 2026 · Tags: Server-side request forgery (SSRF), CWE-20
- [IBM WebSphere Application Server is affected by server-side request forgery](https://agentprime.io/advisories/CVE-2026-9006.md)
  `CVE-2026-9006` · CVE record: IBM WebSphere Application Server · CVSS 7.4 High · Not analysed yet · Published 22 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [activepieces File URL file.ts handleUrlFile server-side request forgery](https://agentprime.io/advisories/CVE-2026-12813.md)
  `CVE-2026-12813` · CVE record: activepieces · CVSS 5.3 Medium · Not analysed yet · Published 21 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [BerriAI litellm has SSRF via Unvalidated spec_path URL in MCP OpenAPI Spec Loader](https://agentprime.io/advisories/GHSA-c693-x898-5g4h.md)
  `GHSA-c693-x898-5g4h`, `CVE-2026-12798`, `PYSEC-2026-4069` · PyPI `litellm`: affected `<=1.82.2`, no fixed version yet · CVSS 5.3 Medium · Not analysed yet · Published 21 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [BerriAI litellm MCP Server Connection Testing rest_endpoints.py \_execute_with_mcp_client server-side request forgery](https://agentprime.io/advisories/CVE-2026-12774.md)
  `CVE-2026-12774` · CVE record: BerriAI litellm · CVSS 5.3 Medium · Not analysed yet · Published 21 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [AVideo - Server-Side Request Forgery in Live/test.php via statsURL Parameter](https://agentprime.io/advisories/CVE-2026-56342.md)
  `CVE-2026-56342` · CVE record: AVideo AVideo · CVSS 6.1 Medium · Not analysed yet · Published 20 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Capgo - Server-Side Request Forgery via Webhook URL Validation](https://agentprime.io/advisories/CVE-2026-56227.md)
  `CVE-2026-56227` · CVE record: Capgo Capgo · CVSS 5.3 Medium · Not analysed yet · Published 20 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [SurrealDB: SSRF via JWKS URL — Redirect Following in JWT Key Fetch](https://agentprime.io/advisories/GHSA-h5rg-8p7f-47g2.md)
  `GHSA-h5rg-8p7f-47g2`, `CVE-2026-63744` · crates.io `surrealdb`: affected `<3.1.5`, fixed in `3.1.5` · CVSS 5.1 Medium · Not analysed yet · Published 19 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Lokka: Azure Resource Manager URL path validation issue](https://agentprime.io/advisories/GHSA-g2gw-q38m-vjfc.md)
  `GHSA-g2gw-q38m-vjfc`, `CVE-2026-58201` · npm `@merill/lokka`: affected `<2.1.2`, fixed in `2.1.2` · CVSS 8.7 High · Not analysed yet · Published 19 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Zeep: Server-Side Request Forgery (SSRF)](https://agentprime.io/advisories/GHSA-4cc2-g9w2-fhf6.md)
  `GHSA-4cc2-g9w2-fhf6`, `CVE-2026-58501`, `PYSEC-2026-2323` · PyPI `zeep`: affected `>=4.0.0, <4.3.3`, fixed in `4.3.3` · CVSS 5.9 Medium · Not analysed yet · Published 19 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [SearXNG MCP Server: DNS-resolved Private Hostname SSRF in \`web_url_read\`](https://agentprime.io/advisories/GHSA-mrvx-jmjw-vggc.md)
  `GHSA-mrvx-jmjw-vggc`, `CVE-2026-58485` · npm `mcp-searxng`: affected `<1.7.1`, fixed in `1.7.1` · CVSS 7.1 High · Not analysed yet · Published 19 Jun 2026 · Tags: Server-side request forgery (SSRF)

Newest: <https://agentprime.io/advisories/tag/ssrf.md>
Older: <https://agentprime.io/advisories/tag/ssrf.md?cursor=WyIyMDI2LTA2LTE5VDIxOjQyOjQ2LjAwMDAwMFoiLCJHSFNBLW1ydngtam1qdy12Z2djIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=ssrf&cursor=WyIyMDI2LTA2LTI5VDE3OjEzOjU3LjQ3MzAwMFoiLCJDVkUtMjAyNi01NjI4NSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/ssrf/?cursor=WyIyMDI2LTA2LTI5VDE3OjEzOjU3LjQ3MzAwMFoiLCJDVkUtMjAyNi01NjI4NSJd>. Everything for agents: <https://agentprime.io/llms.txt>.