# Server-side request forgery (SSRF).

The server made to send requests an attacker chooses. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [FacturaScripts: Authenticated SQL injection in the FacturaScripts REST API filter parameter via parenthesis bypass in \`Where::sqlColumn\`](https://agentprime.io/advisories/GHSA-5qmh-x653-g8qj.md)
  `GHSA-5qmh-x653-g8qj`, `CVE-2026-45262`, `PKSA-582m-pjr9-1vy2` · Packagist `facturascripts/facturascripts`: affected `<2026.2`, fixed in `2026.2` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jul 2026 · Tags: SQL injection, Server-side request forgery (SSRF)
- [Microsoft SharePoint Server Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-55051.md)
  `CVE-2026-55051` · CVE record: Microsoft Microsoft SharePoint Enterprise Server 2016 and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Nexus Repository 3 - Server-Side Request Forgery (SSRF) via HTTP Redirect](https://agentprime.io/advisories/CVE-2026-14646.md)
  `CVE-2026-14646` · CVE record: Sonatype Nexus Repository 3 · CVSS 4.9 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Nexus Repository 3 - Server-Side Request Forgery (SSRF) via Webhook: Global Capability](https://agentprime.io/advisories/CVE-2026-14645.md)
  `CVE-2026-14645` · CVE record: Sonatype Nexus Repository 3 · CVSS 5.1 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in Roundcube Webmail](https://agentprime.io/advisories/CVE-2026-62643.md)
  `CVE-2026-62643` · CVE record: Roundcube Webmail · CVSS 7.2 High · Not analysed yet · Published 14 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Nexus Repository - SSRF in SSL Certificate Retrieval](https://agentprime.io/advisories/CVE-2026-7494.md)
  `CVE-2026-7494` · CVE record: Sonatype Nexus Repository · CVSS 5.3 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Sustainable Irrigation Platform 5.2.16 SSRF via Node-RED Callback URL](https://agentprime.io/advisories/CVE-2026-58478.md)
  `CVE-2026-58478` · CVE record: Dan-in-CA SIP · CVSS 6.3 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Input Validation Vulnerabilities in Snowflake Spark Connector](https://agentprime.io/advisories/CVE-2026-15183.md)
  `CVE-2026-15183` · CVE record: Snowflake Snowflake Spark Connector · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jul 2026 · Tags: SQL injection, Server-side request forgery (SSRF), CWE-441
- [louisho5 picobot web Tool web.go WebTool.Execute server-side request forgery](https://agentprime.io/advisories/CVE-2026-15668.md)
  `CVE-2026-15668` · CVE record: louisho5 picobot · CVSS 5.3 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [zhayujie chatgpt-on-wechat CowAgent Vision Tool vision.py Vision.\_download_to_data_url server-side request forgery](https://agentprime.io/advisories/CVE-2026-15628.md)
  `CVE-2026-15628` · CVE record: zhayujie chatgpt-on-wechat CowAgent · CVSS 5.3 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [nextlevelbuilder GoClaw invoke Endpoint create_video_byteplus.go bytePlusDownloadVideo server-side request forgery](https://agentprime.io/advisories/CVE-2026-15624.md)
  `CVE-2026-15624` · CVE record: nextlevelbuilder GoClaw · CVSS 5.3 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [crewai-tools SSRF redirect bypass exposes internal services](https://agentprime.io/advisories/GHSA-mr4r-hcgx-8p4h.md)
  `GHSA-mr4r-hcgx-8p4h`, `CVE-2026-62240`, `PYSEC-2026-3819` · PyPI `crewai-tools`: affected `<1.15.1`, fixed in `1.15.1` · CVSS 8.3 High · Not analysed yet · Published 14 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Duplicate Advisory: Browser CDP discovery could accept blocked WebSocket URLs](https://agentprime.io/advisories/GHSA-jw7v-5mp7-ghgm.md)
  `GHSA-jw7v-5mp7-ghgm` · npm `openclaw`: affected `<2026.6.6`, fixed in `2026.6.6` · CVSS 8.5 High · Withdrawn · Not analysed yet · Published 14 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [mosaxiv clawlet tool_web_fetch.go tools.webFetch server-side request forgery](https://agentprime.io/advisories/CVE-2026-15620.md)
  `CVE-2026-15620` · CVE record: mosaxiv clawlet · CVSS 5.3 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [mosaxiv clawlet IPv4 tool_web_fetch.go web_fetch server-side request forgery](https://agentprime.io/advisories/CVE-2026-15619.md)
  `CVE-2026-15619` · CVE record: mosaxiv clawlet · CVSS 5.3 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Spring Boot Admin Server < 4.1.2 SSRF via Unauthenticated Instance Registration](https://agentprime.io/advisories/CVE-2026-62242.md)
  `CVE-2026-62242` · CVE record: codecentric spring-boot-admin · CVSS 7.7 High · Not analysed yet · Published 13 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Laravel-Mediable < 7.0.0 SSRF via RemoteUrlAdapter URL Handling](https://agentprime.io/advisories/CVE-2026-49969.md)
  `CVE-2026-49969` · CVE record: plank laravel-mediable · CVSS 5.3 Medium · Not analysed yet · Published 13 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [NukeViet: Pre-authentication SSRF via X-Forwarded-Host](https://agentprime.io/advisories/GHSA-4chg-4752-w88r.md)
  `GHSA-4chg-4752-w88r`, `CVE-2026-55372`, `PKSA-x92d-g786-69f4` · Packagist `nukeviet/nukeviet`: affected `<4.6.00`, fixed in `4.6.00` · CVSS 7.2 High · Not analysed yet · Published 13 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Decidim: Push subscriptions can be abused for server-side requests](https://agentprime.io/advisories/GHSA-2g9c-vf8h-prxx.md)
  `GHSA-2g9c-vf8h-prxx`, `CVE-2026-45573` · RubyGems `decidim-core`: affected `<0.30.9 || >=0.31.0.rc1, <0.31.5 || >=0.32.0.rc1, <0.32.0`, fixed in `0.30.9`, `0.31.5`, `0.32.0` · CVSS 6.4 Medium · Not analysed yet · Published 13 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs. A vulnerability in Apache Gravitino.](https://agentprime.io/advisories/PYSEC-2026-3442.md)
  `PYSEC-2026-3442`, `CVE-2026-49876` · PyPI `apache-gravitino`: affected `>=1.0.0, <1.3.0`, fixed in `1.3.0` · CVSS 6.5 Medium · Not analysed yet · Published 13 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress Auto Featured Image (Auto Post Thumbnail) plugin <= 5.0.4 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-61970.md)
  `CVE-2026-61970` · CVE record: Themeisle Auto Featured Image (Auto Post Thumbnail) · CVSS 4.9 Medium · Not analysed yet · Published 13 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress Instant Image Generator plugin <= 2.1.4 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-57413.md)
  `CVE-2026-57413` · CVE record: bdthemes Instant Image Generator · CVSS 6.4 Medium · Not analysed yet · Published 13 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress PDF Generator for WordPress plugin <= 1.6.2 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-57407.md)
  `CVE-2026-57407` · CVE record: WP Swings PDF Generator for WordPress · CVSS 7.2 High · Not analysed yet · Published 13 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress WPJAM Basic plugin <= 7.0 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-57372.md)
  `CVE-2026-57372` · CVE record: denishua WPJAM Basic · CVSS 7.2 High · Not analysed yet · Published 13 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Server-Side Request Forgery protection bypass in misp-modules html_to_markdown via IPv4-mapped IPv6 addresses](https://agentprime.io/advisories/CVE-2026-62143.md)
  `CVE-2026-62143` · CVE record: misp misp-modules · CVSS 8.3 High · Not analysed yet · Published 13 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [kLOsk adloop write.py \_validate_urls server-side request forgery](https://agentprime.io/advisories/CVE-2026-15525.md)
  `CVE-2026-15525` · CVE record: kLOsk adloop · CVSS 5.3 Medium · Not analysed yet · Published 13 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [LogicalDOC Enterprise Version up to and before v9.1.1 is vulnerable to Server-Side Request Forgery (SSRF).](https://agentprime.io/advisories/CVE-2025-45869.md)
  `CVE-2025-45869` · CVE record · CVSS 7.3 High · Not analysed yet · Published 13 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Helicone ai-gateway AWS Metadata Service service.rs build_target_url server-side request forgery](https://agentprime.io/advisories/CVE-2026-15508.md)
  `CVE-2026-15508` · CVE record: Helicone ai-gateway · CVSS 5.3 Medium · Not analysed yet · Published 12 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [AstrBotDevs AstrBot MCP Test Endpoint tools.py ToolsRoute.test_mcp_connection server-side request forgery](https://agentprime.io/advisories/CVE-2026-15501.md)
  `CVE-2026-15501` · CVE record: AstrBotDevs AstrBot · CVSS 5.3 Medium · Not analysed yet · Published 12 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [AstrBotDevs AstrBot market_list Endpoint plugin.py get_online_plugins server-side request forgery](https://agentprime.io/advisories/CVE-2026-15500.md)
  `CVE-2026-15500` · CVE record: AstrBotDevs AstrBot · CVSS 5.3 Medium · Not analysed yet · Published 12 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Duplicate Advisory: PraisonAI: Crawl4AI/Chromium backend is also affected by the \`web_crawl\` SSRF validation bypass](https://agentprime.io/advisories/GHSA-rc3q-9pxg-3jhr.md)
  `GHSA-rc3q-9pxg-3jhr` · PyPI `praisonaiagents`: affected `<=1.6.77`, no fixed version yet · CVSS 8.5 High · Withdrawn · Not analysed yet · Published 11 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [OpenAI Provider - Moderately critical - Server-side Request Forgery - SA-CONTRIB-2026-053](https://agentprime.io/advisories/CVE-2026-13233.md)
  `CVE-2026-13233` · CVE record: Drupal OpenAI Provider · CVSS 3.3 Low · Not analysed yet · Published 10 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [TypeBot: SSRF protection bypass via IPv6 unspecified address in Typebot HTTP request execution](https://agentprime.io/advisories/CVE-2026-49213.md)
  `CVE-2026-49213` · CVE record: baptisteArno typebot.io · CVSS 8.1 High · Not analysed yet · Published 10 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Misskey: SSRF bypass in URL Preview](https://agentprime.io/advisories/CVE-2026-57575.md)
  `CVE-2026-57575` · CVE record: misskey-dev misskey · CVSS 6.9 Medium · Not analysed yet · Published 10 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [RabbitMQ: UNC SSRF affecting the management UI on Windows](https://agentprime.io/advisories/CVE-2026-57211.md)
  `CVE-2026-57211` · CVE record: rabbitmq rabbitmq-server · CVSS 6.5 Medium · Not analysed yet · Published 10 Jul 2026 · Tags: Path traversal, Server-side request forgery (SSRF)
- [Coturn: IPv4-mapped 127.0.0.1 bypasses default loopback peer protection](https://agentprime.io/advisories/CVE-2026-53450.md)
  `CVE-2026-53450` · CVE record: coturn coturn · CVSS 7.4 High · Not analysed yet · Published 10 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [MCP Atlassian: DNS-rebinding TOCTOU bypass of the SSRF fix (CVE-2026-27826)](https://agentprime.io/advisories/GHSA-489g-7rxv-6c8q.md)
  `GHSA-489g-7rxv-6c8q`, `CVE-2026-73497` · PyPI `mcp-atlassian`: affected `<0.22.0`, fixed in `0.22.0` · CVSS 6.5 Medium · Not analysed yet · Published 10 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Kimai has Server-Side Request Forgery in Invoice PDF Rendering via Markdown Image URLs](https://agentprime.io/advisories/GHSA-pj8j-p4g4-4vw8.md)
  `GHSA-pj8j-p4g4-4vw8`, `CVE-2026-49865`, `PKSA-j8yw-pd54-qb9k` · Packagist `kimai/kimai`: affected `<2.58.0`, fixed in `2.58.0` · CVSS 5.3 Medium · Not analysed yet · Published 10 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Duplicate Advisory: PraisonAI: Jobs API is unauthenticated by default and allows attacker-controlled webhook SSRF](https://agentprime.io/advisories/GHSA-3wrm-pm5v-8vq8.md)
  `GHSA-3wrm-pm5v-8vq8` · PyPI `praisonai`: affected `<=4.6.77`, no fixed version yet · CVSS 7.2 High · Withdrawn · Not analysed yet · Published 10 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)](https://agentprime.io/advisories/CVE-2026-15143.md)
  `CVE-2026-15143` · CVE record: Red Hat Red Hat OpenShift AI 2.25 and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)](https://agentprime.io/advisories/CVE-2026-15378.md)
  `CVE-2026-15378` · CVE record: Red Hat Red Hat OpenShift AI 2.25 and 2 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [All-in-One Video Gallery <= 4.8.5 - Authenticated (Subscriber+) Server-Side Request Forgery via 'vdl' Parameter](https://agentprime.io/advisories/CVE-2026-12123.md)
  `CVE-2026-12123` · CVE record: plugins360 All-in-One Video Gallery · CVSS 6.4 Medium · Not analysed yet · Published 10 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [zhayujie CowAgent Vision Tool vision.py \_download_to_data_url server-side request forgery](https://agentprime.io/advisories/CVE-2026-15330.md)
  `CVE-2026-15330` · CVE record: zhayujie CowAgent · CVSS 6.9 Medium · Not analysed yet · Published 10 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Sipeed PicoClaw Guarded Web Fetch Flow web.go WebFetchTool.Execute server-side request forgery](https://agentprime.io/advisories/CVE-2026-15317.md)
  `CVE-2026-15317` · CVE record: Sipeed PicoClaw · CVSS 5.3 Medium · Not analysed yet · Published 10 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [YesWiki has Unauthenticated Server-Side Request Forgery via ActivityPub \`Signature.keyId\`](https://agentprime.io/advisories/GHSA-vw42-752g-5mrp.md)
  `GHSA-vw42-752g-5mrp`, `CVE-2026-52769`, `PKSA-hr6j-d2dr-68v5` · Packagist `yeswiki/yeswiki`: affected `>=4.6.2, <4.6.6`, fixed in `4.6.6` · CVSS 8.3 High · Not analysed yet · Published 9 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface](https://agentprime.io/advisories/CVE-2026-0285.md)
  `CVE-2026-0285` · CVE record: Palo Alto Networks Cloud NGFW and 2 more · CVSS 4.7 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [aerostackdev aerostack-mcp mcp-whatsapp upload_media server-side request forgery](https://agentprime.io/advisories/CVE-2026-15189.md)
  `CVE-2026-15189` · CVE record: aerostackdev aerostack-mcp · CVSS 5.3 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Ruby CSS Parser: SSRF and Local File Disclosure in \`CssParser::Parser#read_remote_file\`](https://agentprime.io/advisories/GHSA-9pmc-p236-855h.md)
  `GHSA-9pmc-p236-855h`, `CVE-2026-53727` · RubyGems `css_parser`: affected `<3.0.0`, fixed in `3.0.0` · CVSS 8.9 High · Not analysed yet · Published 9 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [pyLoad: SSRF guard bypass via IPv6 6to4/NAT64 transition wrappers of internal IPs](https://agentprime.io/advisories/GHSA-m5x5-28jr-gpjj.md)
  `GHSA-m5x5-28jr-gpjj`, `CVE-2026-48737`, `PYSEC-2026-2995` · PyPI `pyload-ng`: affected `<=0.5.0b3.dev100`, no fixed version yet · CVSS 4.9 Medium · Not analysed yet · Published 9 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Monsta FTP < 2.14.5 SSRF via IPv4-Mapped IPv6 Address Bypass](https://agentprime.io/advisories/CVE-2026-60105.md)
  `CVE-2026-60105` · CVE record: Monsta Limited of New Zealand Monsta FTP · CVSS 7.7 High · Not analysed yet · Published 8 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Gradio < 6.20.0 - Open Redirect and SSRF via /gradio_api/file= endpoint](https://agentprime.io/advisories/CVE-2026-59806.md)
  `CVE-2026-59806` · CVE record: gradio-app gradio · CVSS 4.9 Medium · Not analysed yet · Published 8 Jul 2026 · Tags: Open redirect, Server-side request forgery (SSRF)
- [repomix - Server-Side Request Forgery via Unvalidated Repository URLs in POST /api/pack](https://agentprime.io/advisories/CVE-2026-59702.md)
  `CVE-2026-59702` · CVE record: repomix repomix · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Weblate SSRF: outbound URL guard misses some private ranges](https://agentprime.io/advisories/GHSA-vmfc-9982-2m45.md)
  `GHSA-vmfc-9982-2m45`, `CVE-2026-50127`, `PYSEC-2026-3416` · PyPI `weblate`: affected `>=5.15, <2026.6`, fixed in `2026.6` · CVSS 5.9 Medium · Not analysed yet · Published 7 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [oasdiff does not enforce --allow-external-refs=false on the git-revision load path (SSRF / local file read)](https://agentprime.io/advisories/GHSA-2jcc-mxv7-p3f9.md)
  `GHSA-2jcc-mxv7-p3f9`, `CVE-2026-53508`, `GO-2026-5937` · Go `github.com/oasdiff/oasdiff`: affected `>=1.13.2, <1.18.1`, fixed in `1.18.1` · CVSS 6.0 Medium · Not analysed yet · Published 7 Jul 2026 · Tags: Path traversal, Server-side request forgery (SSRF), CWE-693
- [LocalAI POST /models/apply permits unauthenticated server-side request forgery through gallery URLs](https://agentprime.io/advisories/GHSA-8c5q-hx4g-qq23.md)
  `GHSA-8c5q-hx4g-qq23`, `CVE-2026-59707`, `GO-2026-6645` · Go `github.com/mudler/LocalAI`: affected `<1.40.1-0.20260703213242-2cbb3c96b34d`, fixed in `1.40.1-0.20260703213242-2cbb3c96b34d` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [FastGPT: SSRF in HTTP-tool OpenAPI schema importer via SwaggerParser $ref (bypasses the isInternalAddress guard)](https://agentprime.io/advisories/CVE-2026-54607.md)
  `CVE-2026-54607` · CVE record: labring FastGPT · CVSS 7.7 High · Not analysed yet · Published 7 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [@better-auth/sso provider registration has server-side request forgery via unvalidated OIDC endpoints](https://agentprime.io/advisories/GHSA-5rr4-8452-hf4v.md)
  `GHSA-5rr4-8452-hf4v`, `CVE-2026-53513` · npm `@better-auth/sso`: affected `>=0.1.0, <1.6.11`, fixed in `1.6.11` · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Jul 2026 · Tags: Server-side request forgery (SSRF), CWE-20, CWE-345, CWE-441
- [@aborruso/ckan-mcp-server: SSRF via base_url allows access to internal networks (Potential fix bypass of CVE-2026-33060)](https://agentprime.io/advisories/GHSA-g84h-j7jj-x32p.md)
  `GHSA-g84h-j7jj-x32p`, `CVE-2026-53509` · npm `@aborruso/ckan-mcp-server`: affected `<0.4.106`, fixed in `0.4.106` · CVSS 5.7 Medium · Not analysed yet · Published 7 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [NocoBase 2.1.20 Server-Side Request Forgery via serverRequest wrapper](https://agentprime.io/advisories/CVE-2026-58468.md)
  `CVE-2026-58468` · CVE record: nocobase nocobase · CVSS 5.1 Medium · Not analysed yet · Published 7 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Open WebUI has Blind Server Side Request Forgery in its Image Edit Functionality](https://agentprime.io/advisories/GHSA-jgx9-jr5x-mvpv.md)
  `GHSA-jgx9-jr5x-mvpv`, `CVE-2026-34225`, `PYSEC-2026-2740` · PyPI `open-webui`: affected `<=0.7.2`, no fixed version yet · CVSS 4.3 Medium · Not analysed yet · Published 7 Jul 2026 · Tags: Server-side request forgery (SSRF)

Newest: <https://agentprime.io/advisories/tag/ssrf.md>
Older: <https://agentprime.io/advisories/tag/ssrf.md?cursor=WyIyMDI2LTA3LTA3VDE2OjUxOjMwLjAwMDAwMFoiLCJHSFNBLWpneDktanI1eC1tdnB2Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=ssrf&cursor=WyIyMDI2LTA3LTE0VDE4OjE1OjI1LjAwMDAwMFoiLCJHSFNBLXh3OXEtMm12Ni05ZnI4Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/ssrf/?cursor=WyIyMDI2LTA3LTE0VDE4OjE1OjI1LjAwMDAwMFoiLCJHSFNBLXh3OXEtMm12Ni05ZnI4Il0>. Everything for agents: <https://agentprime.io/llms.txt>.