# Server-side request forgery (SSRF).

The server made to send requests an attacker chooses. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [New API: SSRF Protection Bypass via Unresolved Hostname in Notification URLs](https://agentprime.io/advisories/GHSA-6qcr-qxgr-m7fv.md)
  `GHSA-6qcr-qxgr-m7fv`, `CVE-2026-33655`, `GO-2026-5930` · Go `github.com/QuantumNous/new-api`: affected `<0.12.0-alpha.1`, fixed in `0.12.0-alpha.1` · CVSS 7.7 High · Not analysed yet · Published 7 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Coolify: Server-Side Request Forgery via attacker-controlled GitHub App API URL](https://agentprime.io/advisories/CVE-2026-34170.md)
  `CVE-2026-34170` · CVE record: coollabsio coolify · CVSS 4.3 Medium · Not analysed yet · Published 7 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Coolify: SSRF via S3 Storage Endpoint in testConnection()](https://agentprime.io/advisories/CVE-2026-42147.md)
  `CVE-2026-42147` · CVE record: coollabsio coolify · CVSS 4.9 Medium · Not analysed yet · Published 7 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Coder's workspace agent API insecure redirect handling allowed cross-agent file read and write](https://agentprime.io/advisories/GHSA-qrwj-vh9x-gw5v.md)
  `GHSA-qrwj-vh9x-gw5v`, `CVE-2026-63443`, `GO-2026-5923` · Go `github.com/coder/coder/v2`: affected `>=2.27.0, <2.29.19 || >=2.30.0, <2.32.9 || >=2.33.0, <2.33.10 || >=2.34.0, <2.34.4`, fixed in `2.29.19`, `2.32.9`, `2.33.10`, `2.34.4` · CVSS 8.3 High · Not analysed yet · Published 6 Jul 2026 · Tags: Broken access control, Server-side request forgery (SSRF)
- [Dragonfly scheduler v1 and v2 gRPC unauthenticated SSRF via attacker-controlled PeerHost in DownloadTinyFile](https://agentprime.io/advisories/GHSA-chwm-m7g7-685g.md)
  `GHSA-chwm-m7g7-685g`, `CVE-2026-54637`, `GO-2026-5910` · Go `d7y.io/dragonfly/v2`: affected `<2.4.4-rc.3`, fixed in `2.4.4-rc.3` · CVSS 5.5 Medium · Not analysed yet · Published 6 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [flyto-core has SSRF guard bypass via IPv6 transition addresses (IPv4-mapped / 6to4 / NAT64) in validate_url_ssrf](https://agentprime.io/advisories/GHSA-794r-5rp2-fpg8.md)
  `GHSA-794r-5rp2-fpg8`, `CVE-2026-55787`, `PYSEC-2026-2481` · PyPI `flyto-core`: affected `<2.26.3`, fixed in `2.26.3` · CVSS 7.1 High · Not analysed yet · Published 6 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Anti-Virus for ownCloud 10 is vulnerable to Server-Side Request Forgery (SSRF)](https://agentprime.io/advisories/CVE-2025-53830.md)
  `CVE-2025-53830` · CVE record: owncloud Anti-Virus for ownCloud and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [SharePoint for ownCloud 10 is vulnerable to Server-Side Request Forgery (SSRF)](https://agentprime.io/advisories/CVE-2025-53828.md)
  `CVE-2025-53828` · CVE record: owncloud SharePoint and 1 more · CVSS 8.5 High · Not analysed yet · Published 6 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Apache Camel-Atmosphere-Websocket: The inbound consumer maps externally-supplied WebSocket query parameters into the Exchange without a HeaderFilterStrategy](https://agentprime.io/advisories/GHSA-rcvm-6r79-cf4r.md)
  `GHSA-rcvm-6r79-cf4r`, `CVE-2026-55993` · Maven `org.apache.camel:camel-atmosphere-websocket`: affected `>=4.0.0, <4.14.8 || >=4.15.0, <4.18.3 || >=4.19.0, <4.21.0`, fixed in `4.14.8`, `4.18.3`, `4.21.0` · CVSS 7.5 High · Not analysed yet · Published 6 Jul 2026 · Tags: Information disclosure, Server-side request forgery (SSRF), CWE-20
- [Apache Camel-Iggy: The inbound consumer maps externally-supplied Iggy message user-headers into the Exchange without a HeaderFilterStrategy](https://agentprime.io/advisories/GHSA-pw9q-pq7c-rfqw.md)
  `GHSA-pw9q-pq7c-rfqw`, `CVE-2026-55994` · Maven `org.apache.camel:camel-iggy`: affected `>=4.17.0, <4.18.3 || >=4.19.0, <4.21.0`, fixed in `4.18.3`, `4.21.0` · CVSS 7.5 High · Not analysed yet · Published 6 Jul 2026 · Tags: Information disclosure, Server-side request forgery (SSRF), CWE-20
- [Apache Camel DNS Has Improper Input Validation, Leading to Server-Side Request Forgery (SSRF)](https://agentprime.io/advisories/GHSA-hcm8-x79p-wx2w.md)
  `GHSA-hcm8-x79p-wx2w`, `CVE-2026-48205` · Maven `org.apache.camel:camel-dns`: affected `>=4.0.0, <4.14.8 || >=4.15.0, <4.18.3 || >=4.19.0, <4.21.0`, fixed in `4.14.8`, `4.18.3`, `4.21.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Jul 2026 · Tags: Server-side request forgery (SSRF), CWE-20
- [Apache Camel-Vertx-Websocket: The inbound consumer maps externally-supplied WebSocket query and path parameters into the Exchange without a HeaderFilterStrategy](https://agentprime.io/advisories/GHSA-hgg5-gp4c-gpcg.md)
  `GHSA-hgg5-gp4c-gpcg`, `CVE-2026-46726` · Maven `org.apache.camel:camel-vertx-websocket`: affected `>=4.0.0, <4.14.8 || >=4.15.0, <4.18.3 || >=4.19.0, <4.21.0`, fixed in `4.14.8`, `4.18.3`, `4.21.0` · CVSS 7.5 High · Not analysed yet · Published 6 Jul 2026 · Tags: Information disclosure, Server-side request forgery (SSRF), CWE-20
- [Apache Camel-Solr: The SolrParam. and SolrField. Exchange header prefixes used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to inject Solr query parameters (server-side request forgery) and document fields](https://agentprime.io/advisories/GHSA-4h4f-v54q-7pq8.md)
  `GHSA-4h4f-v54q-7pq8`, `CVE-2026-48203` · Maven `org.apache.camel:camel-solr`: affected `>=4.0.0, <4.14.8 || >=4.15.0, <4.18.3 || >=4.19.0, <4.21.0`, fixed in `4.14.8`, `4.18.3`, `4.21.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Jul 2026 · Tags: Other injection, Server-side request forgery (SSRF), CWE-20
- [AIAnytime Awesome-MCP-Server mcp-wiki/wiki-summary server.py server-side request forgery](https://agentprime.io/advisories/CVE-2026-14748.md)
  `CVE-2026-14748` · CVE record: AIAnytime Awesome-MCP-Server · CVSS 5.3 Medium · Not analysed yet · Published 5 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Microsoft Edge (Chromium-based) Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-58278.md)
  `CVE-2026-58278` · CVE record: Microsoft Microsoft Edge (Chromium-based) · CVSS 5.4 Medium · Not analysed yet · Published 3 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Microsoft Edge (Chromium-based) Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-57993.md)
  `CVE-2026-57993` · CVE record: Microsoft Microsoft Edge (Chromium-based) · CVSS 7.4 High · Not analysed yet · Published 3 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Microsoft Edge (Chromium-based) Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-57987.md)
  `CVE-2026-57987` · CVE record: Microsoft Microsoft Edge (Chromium-based) · CVSS 6.5 Medium · Not analysed yet · Published 3 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in Eclipse Foundation Eclipse Theia](https://agentprime.io/advisories/CVE-2026-10055.md)
  `CVE-2026-10055` · CVE record: Eclipse Foundation Eclipse Theia · CVSS 8.5 High · Not analysed yet · Published 3 Jul 2026 · Tags: Information disclosure, Server-side request forgery (SSRF)
- [WP Import Export Lite <= 3.9.30 - Authenticated (Administrator+) Server-Side Request Forgery via 'file_url' Parameter](https://agentprime.io/advisories/CVE-2026-11397.md)
  `CVE-2026-11397` · CVE record: vjinfotech WP Import Export Lite · CVSS 5.5 Medium · Not analysed yet · Published 3 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Azure OpenAI Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-45499.md)
  `CVE-2026-45499` · CVE record: Microsoft Azure Open AI · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-57100.md)
  `CVE-2026-57100` · CVE record: Microsoft Microsoft Entra Provisioning Service · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Mautic Focus component Vulnerable to SSRF](https://agentprime.io/advisories/GHSA-jmv8-8j9j-rcpc.md)
  `GHSA-jmv8-8j9j-rcpc`, `CVE-2026-9557`, `PKSA-tmx3-5zmv-624c` · Packagist `mautic/core`: affected `>=4.0.0, <=4.4.13 || >=5.0.0, <5.2.11 || >=6.0.0, <6.0.9 || >=7.0.0, <7.1.2`, fixed in `5.2.11`, `6.0.9`, `7.1.2` · CVSS 6.4 Medium · Not analysed yet · Published 2 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [AutoBangumi < 3.2.8 - SSRF via /api/v1/setup/test-downloader](https://agentprime.io/advisories/CVE-2026-59101.md)
  `CVE-2026-59101` · CVE record: EstrellaXD Auto_Bangumi · CVSS 6.9 Medium · Not analysed yet · Published 2 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [LobeChat < 2.2.10-canary.18 - SSRF via importFromUrl and fetchImageFromUrl](https://agentprime.io/advisories/CVE-2026-59095.md)
  `CVE-2026-59095` · CVE record: lobehub lobehub · CVSS 8.3 High · Not analysed yet · Published 2 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [@asymmetric-effort/specifyjs: No redirect target validation in secureFetch](https://agentprime.io/advisories/GHSA-j5qp-p44g-2m49.md)
  `GHSA-j5qp-p44g-2m49` · npm `@asymmetric-effort/specifyjs`: affected `<0.2.136`, fixed in `0.2.136` · CVSS 4.0, no score published · Not analysed yet · Published 2 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [@asymmetric-effort/specifyjs: \`data:\` URI allowed without size restriction](https://agentprime.io/advisories/GHSA-2944-57xv-2682.md)
  `GHSA-2944-57xv-2682` · npm `@asymmetric-effort/specifyjs`: affected `<0.2.136`, fixed in `0.2.136` · CVSS 4.0, no score published · Not analysed yet · Published 2 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [@asymmetric-effort/specifyjs: Localhost bypass incomplete (IPv6, 0.0.0.0, 127.x range)](https://agentprime.io/advisories/GHSA-xw57-23p8-9wc5.md)
  `GHSA-xw57-23p8-9wc5` · npm `@asymmetric-effort/specifyjs`: affected `<0.2.136`, fixed in `0.2.136` · CVSS 4.0, no score published · Not analysed yet · Published 2 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [@asymmetric-effort/specifyjs: URL parse failure silently allows request](https://agentprime.io/advisories/GHSA-8882-frvv-92w4.md)
  `GHSA-8882-frvv-92w4`, `CVE-2026-50288` · npm `@asymmetric-effort/specifyjs`: affected `<0.2.136`, fixed in `0.2.136` · CVSS 8.7 High · Not analysed yet · Published 2 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [OpenClaw: message.action forwarding could send Gateway credentials to model-supplied loopback URLs](https://agentprime.io/advisories/GHSA-grc3-2j34-p6gm.md)
  `GHSA-grc3-2j34-p6gm`, `CVE-2026-53827` · npm `openclaw`: affected `<2026.5.2`, fixed in `2026.5.2` · CVSS 6.0 Medium · Not analysed yet · Published 2 Jul 2026 · Tags: Hard-coded credentials, Server-side request forgery (SSRF)
- [OpenClaw's browser act interactions could bypass private-network navigation checks](https://agentprime.io/advisories/GHSA-2hfg-4fh4-qp7f.md)
  `GHSA-2hfg-4fh4-qp7f`, `CVE-2026-53812` · npm `openclaw`: affected `<2026.5.18`, fixed in `2026.5.18` · CVSS 4.9 Medium · Not analysed yet · Published 2 Jul 2026 · Tags: Broken access control, Server-side request forgery (SSRF)
- [Server-side request forgery in Ubiquiti Inc UniFi Protect Application](https://agentprime.io/advisories/CVE-2026-55115.md)
  `CVE-2026-55115` · CVE record: Ubiquiti Inc UniFi Protect Application · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in Ubiquiti Inc UniFi Talk Application](https://agentprime.io/advisories/CVE-2026-55113.md)
  `CVE-2026-55113` · CVE record: Ubiquiti Inc UniFi Talk Application · CVSS 7.5 High · Not analysed yet · Published 2 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in Ubiquiti Inc UniFi OS Server and others](https://agentprime.io/advisories/CVE-2026-54401.md)
  `CVE-2026-54401` · CVE record: Ubiquiti Inc UniFi OS Server and 4 more · CVSS 7.7 High · Not analysed yet · Published 2 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress GeoDirectory plugin <= 2.8.161 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-57681.md)
  `CVE-2026-57681` · CVE record: Paolo GeoDirectory · CVSS 6.4 Medium · Not analysed yet · Published 2 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress Paid Member Subscriptions plugin <= 3.0.4 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-57348.md)
  `CVE-2026-57348` · CVE record: Cozmoslabs Paid Member Subscriptions · CVSS 7.2 High · Not analysed yet · Published 2 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Server-Site Request Forgery in liboauth2](https://agentprime.io/advisories/CVE-2026-54430.md)
  `CVE-2026-54430` · CVE record: OpenIDC liboauth2 · CVSS 5.1 Medium · Not analysed yet · Published 2 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in Eclipse Foundation Eclipse CSI - PIA](https://agentprime.io/advisories/CVE-2026-14336.md)
  `CVE-2026-14336` · CVE record: Eclipse Foundation Eclipse CSI - PIA · CVSS 8.2 High · Not analysed yet · Published 2 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Apify Model Context Protocol (MCP) server: Actor MCP path authority injection leaks Apify token](https://agentprime.io/advisories/GHSA-6gr2-qh89-hxwm.md)
  `GHSA-6gr2-qh89-hxwm`, `CVE-2026-50143` · npm `@apify/actors-mcp-server`: affected `<0.10.11`, fixed in `0.10.11` · CVSS 8.1 High · Not analysed yet · Published 1 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [oras-go blob upload vulnerable to credential forwarding via unvalidated Location header](https://agentprime.io/advisories/GHSA-jxpm-75mh-9fp7.md)
  `GHSA-jxpm-75mh-9fp7`, `CVE-2026-50151`, `GO-2026-5882` · Go `oras.land/oras-go/v2`: affected `<2.6.1`, fixed in `2.6.1` · CVSS 7.5 High · Not analysed yet · Published 1 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [oras-go: Malicious registry can hijack Bearer token realm to exfiltrate credentials and refresh tokens](https://agentprime.io/advisories/GHSA-xf85-363p-868w.md)
  `GHSA-xf85-363p-868w`, `CVE-2026-48978`, `GO-2026-5885` · Go `oras.land/oras-go` and 1 more: affected `<=1.2.7`, no fixed version yet · CVSS 2.1 Low · Not analysed yet · Published 1 Jul 2026 · Tags: Weak cryptography or TLS, Server-side request forgery (SSRF)
- [Rancher Fleet has SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yaml](https://agentprime.io/advisories/GHSA-hx4v-cxpf-vh8m.md)
  `GHSA-hx4v-cxpf-vh8m`, `CVE-2026-44936`, `GO-2026-5873` · Go `github.com/rancher/fleet`: affected `>=0.12.0, <0.12.15 || >=0.13.0, <0.13.11 || >=0.14.0, <0.14.6 || >=0.15.0, <0.15.2`, fixed in `0.12.15`, `0.13.11`, `0.14.6`, `0.15.2` · CVSS 5.0 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Rancher Fleet has Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components](https://agentprime.io/advisories/GHSA-jmf4-m7j9-g72r.md)
  `GHSA-jmf4-m7j9-g72r`, `CVE-2026-44937`, `GO-2026-5874` · Go `github.com/rancher/fleet`: affected `>=0.12.0, <0.12.15 || >=0.13.0, <0.13.11 || >=0.14.0, <0.14.6 || >=0.15.0, <0.15.2`, fixed in `0.12.15`, `0.13.11`, `0.14.6`, `0.15.2` · CVSS 8.3 High · Not analysed yet · Published 1 Jul 2026 · Tags: Server-side request forgery (SSRF), CWE-345
- [SurrealDB: Port-specific --deny-net rules silently bypassed on HTTP redirect](https://agentprime.io/advisories/GHSA-97vg-427p-8hx5.md)
  `GHSA-97vg-427p-8hx5`, `CVE-2026-63743` · crates.io `surrealdb`: affected `<3.1.0`, fixed in `3.1.0` · CVSS 5.3 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [auth-fetch-mcp has SSRF Protection Bypass via IPv4-mapped IPv6 Loopback](https://agentprime.io/advisories/GHSA-pvrj-8cg3-j5f8.md)
  `GHSA-pvrj-8cg3-j5f8`, `CVE-2026-49857` · npm `auth-fetch-mcp`: affected `<3.0.2`, fixed in `3.0.2` · CVSS 7.4 High · Not analysed yet · Published 1 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [@jshookmcp/jshook: ICMP probe and traceroute skip local-network SSRF authorization](https://agentprime.io/advisories/GHSA-c5r6-m4mr-8q5j.md)
  `GHSA-c5r6-m4mr-8q5j`, `CVE-2026-49856` · npm `@jshookmcp/jshook`: affected `>=0.3.1, <0.3.2`, fixed in `0.3.2` · CVSS 4.3 Medium · Not analysed yet · Published 1 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in NVIDIA Megatron-Bridge](https://agentprime.io/advisories/CVE-2026-24242.md)
  `CVE-2026-24242` · CVE record: NVIDIA Megatron-Bridge · CVSS 7.8 High · Not analysed yet · Published 1 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [SSRF with API key leak in pretix-oppwa](https://agentprime.io/advisories/CVE-2026-13603.md)
  `CVE-2026-13603` · CVE record: pretix pretix-oppwa · CVSS 9.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Jul 2026 · Tags: Server-side request forgery (SSRF), CWE-20
- [Open WebUI - Server-Side Request Forgery via Location Redirect in /api/v1/retrieval/process/web](https://agentprime.io/advisories/CVE-2026-56399.md)
  `CVE-2026-56399` · CVE record: open-webui open-webui · CVSS 5.3 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Vulnerabilities found in Watson Data Intelligence](https://agentprime.io/advisories/CVE-2025-36324.md)
  `CVE-2025-36324` · CVE record: IBM watsonx.data intelligence · CVSS 4.3 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [SSRF via HTTP Redirect Following in Langflow API Request Component](https://agentprime.io/advisories/CVE-2026-10129.md)
  `CVE-2026-10129` · CVE record: IBM Langflow OSS · CVSS 8.5 High · Not analysed yet · Published 30 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [DNS Rebinding TOCTOU Bypass of SSRF Protection in Langflow OSS URL Component](https://agentprime.io/advisories/CVE-2026-10546.md)
  `CVE-2026-10546` · CVE record: IBM Langflow OSS · CVSS 7.1 High · Not analysed yet · Published 30 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [SSRF Vulnerability in Langflow OSS Legacy Components Bypasses Protection](https://agentprime.io/advisories/CVE-2026-10564.md)
  `CVE-2026-10564` · CVE record: IBM Langflow OSS · CVSS 8.2 High · Not analysed yet · Published 30 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [IBM WebSphere Application Server Liberty is affected by a server-side request forgery vulnerability](https://agentprime.io/advisories/CVE-2026-11546.md)
  `CVE-2026-11546` · CVE record: IBM WebSphere Application Server - Liberty · CVSS 7.1 High · Not analysed yet · Published 30 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [IBM WebSphere Application Server Liberty is affected by an authorization bypass vulnerability](https://agentprime.io/advisories/CVE-2026-11714.md)
  `CVE-2026-11714` · CVE record: IBM WebSphere Application Server - Liberty · CVSS 8.5 High · Not analysed yet · Published 30 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [IBM WebSphere eXtreme Scale is affected by server side request forgery when ORB is used as Transport Protocol](https://agentprime.io/advisories/CVE-2026-13773.md)
  `CVE-2026-13773` · CVE record: IBM WebSphere Extreme Scale · CVSS 6.0 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Fulcio has OIDC Discovery Redirect Following Allows SSRF and JWKS Substitution for Meta-Issuer Paths, with Kubernetes Service-Account Token Leakage](https://agentprime.io/advisories/GHSA-f5mr-q85p-6hh6.md)
  `GHSA-f5mr-q85p-6hh6`, `CVE-2026-49478`, `GO-2026-5853` · Go `github.com/sigstore/fulcio`: affected `<1.8.6`, fixed in `1.8.6` · CVSS 8.7 High · Not analysed yet · Published 30 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)](https://agentprime.io/advisories/CVE-2026-48285.md)
  `CVE-2026-48285` · CVE record: Adobe ColdFusion 2025 and 1 more · CVSS 8.6 High · Not analysed yet · Published 30 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Foreman: ssrf to cloud metada service through unvalidated test_url parameters in foreman config](https://agentprime.io/advisories/CVE-2026-13316.md)
  `CVE-2026-13316` · CVE record: Red Hat Red Hat Satellite 6 · CVSS 4.4 Medium · Not analysed yet · Published 30 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Pinpoint - Server-Side Request Forgery via Alarm Webhook Registration](https://agentprime.io/advisories/CVE-2026-57947.md)
  `CVE-2026-57947` · CVE record: pinpoint-apm pinpoint · CVSS 6.3 Medium · Not analysed yet · Published 29 Jun 2026 · Tags: Server-side request forgery (SSRF)
- [Nitter - Server-Side Request Forgery in /video Media Proxy Endpoint](https://agentprime.io/advisories/CVE-2026-56285.md)
  `CVE-2026-56285` · CVE record: zedeus nitter · CVSS 7.7 High · Not analysed yet · Published 29 Jun 2026 · Tags: Server-side request forgery (SSRF), CWE-1188

Newest: <https://agentprime.io/advisories/tag/ssrf.md>
Older: <https://agentprime.io/advisories/tag/ssrf.md?cursor=WyIyMDI2LTA2LTI5VDE3OjEzOjU3LjQ3MzAwMFoiLCJDVkUtMjAyNi01NjI4NSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=ssrf&cursor=WyIyMDI2LTA3LTA3VDE2OjUxOjMwLjAwMDAwMFoiLCJHSFNBLWpneDktanI1eC1tdnB2Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/ssrf/?cursor=WyIyMDI2LTA3LTA3VDE2OjUxOjMwLjAwMDAwMFoiLCJHSFNBLWpneDktanI1eC1tdnB2Il0>. Everything for agents: <https://agentprime.io/llms.txt>.