# Server-side request forgery (SSRF).

The server made to send requests an attacker chooses. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Plack::App::Prerender versions before 0.3.0 for Perl can proxy to an arbitrary host via unvalidated REQUEST_URI concatenation in call](https://agentprime.io/advisories/CVE-2026-17552.md)
  `CVE-2026-17552` · CVE record: RRWO Plack::App::Prerender · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 27 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [VeloCloud Orchestrator Missing Input Validation SSRF](https://agentprime.io/advisories/CVE-2026-17192.md)
  `CVE-2026-17192` · CVE record: Arista Networks VeloCloud Orchestrator On-Prem · CVSS 6.3 Medium · Not analysed yet · Published 27 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress Feedzy plugin <= 5.2.4 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-66437.md)
  `CVE-2026-66437` · CVE record: Themeisle Feedzy · CVSS 4.9 Medium · Not analysed yet · Published 27 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress AffiliateX plugin <= 2.3.5 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-65558.md)
  `CVE-2026-65558` · CVE record: WPCenter AffiliateX · CVSS 5.4 Medium · Not analysed yet · Published 27 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress 3D Flipbook PDF Viewer & Embedder plugin <= 1.4.2 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-59552.md)
  `CVE-2026-59552` · CVE record: Shahadat Hossain 3D Flipbook PDF Viewer \&amp; Embedder · CVSS 7.2 High · Not analysed yet · Published 27 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Kimi Code FetchURL SSRF protection bypass via DNS-resolving hostnames and redirects](https://agentprime.io/advisories/CVE-2026-17534.md)
  `CVE-2026-17534` · CVE record: MoonshotAI Kimi Code · CVSS 5.5 Medium · Not analysed yet · Published 27 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Printcart Web to Print Product Designer for WooCommerce < 2.5.3 - Unauthenticated Arbitrary File Read and Server-Side Request Forgery](https://agentprime.io/advisories/CVE-2025-15662.md)
  `CVE-2025-15662` · CVE record: Unknown Printcart Web to Print Product Designer for WooCommerce · CVSS 8.6 High · Not analysed yet · Published 27 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [mf-yang openclaw-cn Browser Control HTTP API agent.act.ts clickViaPlaywright server-side request forgery](https://agentprime.io/advisories/CVE-2026-17458.md)
  `CVE-2026-17458` · CVE record: mf-yang openclaw-cn · CVSS 5.3 Medium · Not analysed yet · Published 26 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [FrontMCP: Server-Side Request Forgery (SSRF) in the OpenAPI adapter spec-change poller](https://agentprime.io/advisories/GHSA-8q49-2h5h-434x.md)
  `GHSA-8q49-2h5h-434x` · npm `@frontmcp/adapters`: affected `<1.5.6`, fixed in `1.5.6` · CVSS 5.9 Medium · Not analysed yet · Published 24 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Cloudreve Admin.Read OAuth tokens can trigger server-side node test requests](https://agentprime.io/advisories/GHSA-v6w6-358x-2433.md)
  `GHSA-v6w6-358x-2433`, `CVE-2026-101048`, `GO-2026-6106` · Go `github.com/cloudreve/Cloudreve/v3` and 1 more: affected `<=3.0.0-20250225100611-da4e44b77af4`, no fixed version yet · CVSS 5.3 Medium · Not analysed yet · Published 24 Jul 2026 · Tags: Broken access control, Server-side request forgery (SSRF)
- [OpenDJ unauthenticated SSRF, local file read and unbounded-read DoS in the DSMLv2 gateway](https://agentprime.io/advisories/GHSA-68r5-9hpg-7qw9.md)
  `GHSA-68r5-9hpg-7qw9` · Maven `org.openidentityplatform.opendj:opendj-dsml-servlet`: affected `<5.1.2`, fixed in `5.1.2` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jul 2026 · Tags: Path traversal, Denial of service, Server-side request forgery (SSRF)
- [Budibase: SSRF via bare fetch() in uploadUrl during AI table generation](https://agentprime.io/advisories/GHSA-hfhx-w8p8-4hc7.md)
  `GHSA-hfhx-w8p8-4hc7`, `CVE-2026-73307` · npm `@budibase/server`: affected `<=3.38.1`, no fixed version yet · CVSS 4.9 Medium · Not analysed yet · Published 24 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Budibase: SSRF via DNS rebinding in the REST datasource integration](https://agentprime.io/advisories/GHSA-v42f-v8xc-j435.md)
  `GHSA-v42f-v8xc-j435`, `CVE-2026-73410` · npm `@budibase/server`: affected `<=3.38.1`, no fixed version yet · CVSS 8.5 High · Not analysed yet · Published 24 Jul 2026 · Tags: Race condition, Server-side request forgery (SSRF)
- [Budibase: DNS rebinding SSRF bypasses remain in OpenAPI import and REST query execution](https://agentprime.io/advisories/GHSA-xg5g-26x8-cvf4.md)
  `GHSA-xg5g-26x8-cvf4`, `CVE-2026-72855` · npm `@budibase/server`: affected `<=3.38.1`, no fixed version yet · CVSS 8.4 High · Not analysed yet · Published 24 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [open-webui terminal proxy path traversal guard bypass via 9x encoded traversal](https://agentprime.io/advisories/GHSA-frvj-c5qp-xj4w.md)
  `GHSA-frvj-c5qp-xj4w`, `CVE-2026-59221`, `PYSEC-2026-3597` · PyPI `open-webui`: affected `>=0.9.6, <0.10.0`, fixed in `0.10.0` · CVSS 7.7 High · Not analysed yet · Published 24 Jul 2026 · Tags: Path traversal, Server-side request forgery (SSRF)
- [Microsoft Kiota Workspace-config poisoning: out-of-repo file write + generation-time SSRF](https://agentprime.io/advisories/GHSA-4rj6-vrwv-wr8m.md)
  `GHSA-4rj6-vrwv-wr8m`, `CVE-2026-59863` · NuGet `Microsoft.OpenApi.Kiota` and 1 more: affected `<1.29.1 || >=1.30.0, <1.32.5`, fixed in `1.29.1`, `1.32.5` · CVSS 7.0 High · Not analysed yet · Published 24 Jul 2026 · Tags: Path traversal, Server-side request forgery (SSRF), CWE-829
- [Microsoft Kiota: Generation-time SSRF + remote/local file inclusion via unrestricted $ref](https://agentprime.io/advisories/GHSA-rg4h-fpcp-2qm8.md)
  `GHSA-rg4h-fpcp-2qm8`, `CVE-2026-59867` · NuGet `Microsoft.OpenApi.Kiota` and 1 more: affected `<1.29.1 || >=1.30.0, <1.32.5`, fixed in `1.29.1`, `1.32.5` · CVSS 7.1 High · Not analysed yet · Published 24 Jul 2026 · Tags: Path traversal, Server-side request forgery (SSRF), CWE-829
- [Data Quality Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-57106.md)
  `CVE-2026-57106` · CVE record: Microsoft Microsoft Purview Data Governance · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Quay: ssrf in red hat quay notification webhooks (slack/generic)](https://agentprime.io/advisories/CVE-2026-16910.md)
  `CVE-2026-16910` · CVE record: Red Hat Red Hat OpenShift Update Service and 1 more · CVSS 5.5 Medium · Not analysed yet · Published 24 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Multiple Security Vulnerabilities in Snowflake libsnowflakeclient](https://agentprime.io/advisories/CVE-2026-16870.md)
  `CVE-2026-16870` · CVE record: Snowflake Snowflake libsnowflakeclient and 2 more · CVSS 8.8 High · Not analysed yet · Published 24 Jul 2026 · Tags: Memory corruption, Server-side request forgery (SSRF)
- [Azure AI Search Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-56167.md)
  `CVE-2026-56167` · CVE record: Microsoft Azure AI Search · CVSS 8.5 High · Not analysed yet · Published 23 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [9Router before 0.4.72 Server-Side Request Forgery via /v1/web/fetch](https://agentprime.io/advisories/CVE-2026-63313.md)
  `CVE-2026-63313` · CVE record: decolua 9router · CVSS 8.3 High · Not analysed yet · Published 23 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [CCure and Victor Application Server - Server Side Request Forgery](https://agentprime.io/advisories/CVE-2026-21653.md)
  `CVE-2026-21653` · CVE record: Johnson Controls CCure 9000 and victor application server · CVSS 7.2 High · Not analysed yet · Published 23 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [PHPSpreadsheet: SSRF bypass via HTTP redirect in WEBSERVICE() domain whitelist](https://agentprime.io/advisories/GHSA-6hq5-7373-42rg.md)
  `GHSA-6hq5-7373-42rg`, `CVE-2026-59931`, `PKSA-dqzt-yst9-1w9y` · Packagist `phpoffice/phpspreadsheet`: affected `<1.30.6 || >=2.0.0, <2.1.18 || >=2.2.0, <2.4.7 || >=3.3.0, <3.10.7 || >=4.0.0, <5.8.1`, fixed in `1.30.6`, `2.1.18`, `2.4.7`, `3.10.7`, `5.8.1` · CVSS 7.7 High · Not analysed yet · Published 23 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress PeproDev Ultimate Invoice plugin <= 2.2.6 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-65516.md)
  `CVE-2026-65516` · CVE record: Pepro Dev. Group PeproDev Ultimate Invoice · CVSS 7.2 High · Not analysed yet · Published 23 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress Complianz plugin <= 7.5.0 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-65496.md)
  `CVE-2026-65496` · CVE record: Complianz Complianz · CVSS 4.4 Medium · Not analysed yet · Published 23 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress JetEngine plugin <= 3.8.11 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-65467.md)
  `CVE-2026-65467` · CVE record: Crocoblock. Jetimpex Inc. JetEngine · CVSS 4.9 Medium · Not analysed yet · Published 23 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress JetBooking plugin <= 4.1.2 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-65466.md)
  `CVE-2026-65466` · CVE record: Crocoblock. Jetimpex Inc. JetBooking · CVSS 4.9 Medium · Not analysed yet · Published 23 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress Photo Block plugin <= 1.7.1 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-24639.md)
  `CVE-2026-24639` · CVE record: Ronald Huereca Photo Block · CVSS 4.4 Medium · Not analysed yet · Published 23 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Joomla Extension - regularlabs.com - SSRF in Cache Cleaner Pro extension](https://agentprime.io/advisories/CVE-2026-64873.md)
  `CVE-2026-64873` · CVE record: regularlabs.com Cache Cleaner Pro extension for Joomla · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Joomla Extension - regularlabs.com - SSRF via remote image downloads in Articles Anywhere and Users Anywhere extensions](https://agentprime.io/advisories/CVE-2026-64799.md)
  `CVE-2026-64799` · CVE record: regularlabs.com Articles Anywhere Pro extension for Joomla and 1 more · CVSS 7.5 High · Not analysed yet · Published 23 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Next.js: Server-Side Request Forgery in Server Actions on custom servers](https://agentprime.io/advisories/GHSA-89xv-2m56-2m9x.md)
  `GHSA-89xv-2m56-2m9x`, `CVE-2026-64649` · npm `next`: affected `>=14.1.1, <15.5.21 || >=16.0.0, <16.2.11`, fixed in `15.5.21`, `16.2.11` · CVSS 8.3 High · Not analysed yet · Published 22 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Next.js: Server-Side Request Forgery in rewrites via attacker-controlled destination hostname](https://agentprime.io/advisories/GHSA-p9j2-gv94-2wf4.md)
  `GHSA-p9j2-gv94-2wf4`, `CVE-2026-64645` · npm `next`: affected `>=12.0.0, <15.5.21 || >=16.0.0, <16.2.11`, fixed in `15.5.21`, `16.2.11` · CVSS 8.3 High · Not analysed yet · Published 22 Jul 2026 · Tags: Open redirect, Server-side request forgery (SSRF)
- [n8n: Send Email Node Arbitrary File Read and SSRF via Nodemailer Content-Object Type Confusion](https://agentprime.io/advisories/GHSA-2x35-3fw4-9jr4.md)
  `GHSA-2x35-3fw4-9jr4`, `CVE-2026-72766` · npm `n8n`: affected `<1.123.67 || >=2.0.0-rc.0, <2.31.5 || >=2.32.0, <2.32.1`, fixed in `1.123.67`, `2.31.5`, `2.32.1` · CVSS 8.2 High · Not analysed yet · Published 22 Jul 2026 · Tags: Information disclosure, Memory corruption, Server-side request forgery (SSRF)
- [n8n: SSRF Protection Bypass via MCP Client Node](https://agentprime.io/advisories/GHSA-vhf8-cg2h-cg3p.md)
  `GHSA-vhf8-cg2h-cg3p`, `CVE-2026-72768` · npm `n8n`: affected `<2.31.5 || >=2.32.0, <2.32.1`, fixed in `2.31.5`, `2.32.1` · CVSS 6.4 Medium · Not analysed yet · Published 22 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [n8n: Authenticated SSRF via Dynamic Node Parameters Endpoints Allows Internal Network Access](https://agentprime.io/advisories/GHSA-9w78-79q7-r4fp.md)
  `GHSA-9w78-79q7-r4fp`, `CVE-2026-65593` · npm `n8n`: affected `<1.123.64 || >=2.0.0-rc.0, <2.29.8 || >=2.30.0, <2.30.1`, fixed in `1.123.64`, `2.29.8`, `2.30.1` · CVSS 6.3 Medium · Not analysed yet · Published 22 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [RadEditor PDF Export SSRF Vulnerability in Telerik UI for ASP.NET AJAX](https://agentprime.io/advisories/CVE-2026-13192.md)
  `CVE-2026-13192` · CVE record: Progress Software Telerik UI for ASP.NET AJAX · CVSS 6.5 Medium · Not analysed yet · Published 22 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Duplicate Advisory: Authenticated SSRF via Dynamic Node Parameters Endpoints Allows Internal Network Access](https://agentprime.io/advisories/GHSA-38fj-36m5-783c.md)
  `GHSA-38fj-36m5-783c` · npm `n8n`: affected `*`, no fixed version yet · CVSS 4.0, no score published · Withdrawn · Not analysed yet · Published 22 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Gitea: SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata](https://agentprime.io/advisories/GHSA-2wm4-vwp6-v7xc.md)
  `GHSA-2wm4-vwp6-v7xc`, `BIT-gitea-2026-34966`, `CVE-2026-34966`, `CVE-2026-59765`, `GO-2026-6039` · Go `code.gitea.io/gitea` and 1 more: affected `<1.27.0`, fixed in `1.27.0` · CVSS 8.3 High · Not analysed yet · Published 21 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Verba (goldenverba) Unauthenticated Server-Side Request Forgery via WebSocket Import Endpoint HTMLReader](https://agentprime.io/advisories/CVE-2026-65318.md)
  `CVE-2026-65318` · CVE record: Weaviate Verba · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Verba (goldenverba) Server-Side Request Forgery via /api/connect and Same-Origin Middleware Bypass](https://agentprime.io/advisories/CVE-2026-65317.md)
  `CVE-2026-65317` · CVE record: Weaviate Verba · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Gitea: Two SSRF findings](https://agentprime.io/advisories/GHSA-2fcr-jfvc-vgg2.md)
  `GHSA-2fcr-jfvc-vgg2`, `CVE-2026-58314`, `GO-2026-6038` · Go `code.gitea.io/gitea`: affected `<1.27.0`, fixed in `1.27.0` · CVSS 7.7 High · Not analysed yet · Published 21 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Keep Unauthenticated Server-Side Request Forgery via POST /providers/healthcheck](https://agentprime.io/advisories/CVE-2026-65057.md)
  `CVE-2026-65057` · CVE record: keephq keep · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [mcp-webresearch Server-Side Request Forgery in visit_page Due to Missing Internal-IP Filtering](https://agentprime.io/advisories/CVE-2026-65056.md)
  `CVE-2026-65056` · CVE record: mzxrai mcp-webresearch · CVSS 8.3 High · Not analysed yet · Published 21 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Gitea: Repository migration SSRF via multi-answer DNS allow-list bypass](https://agentprime.io/advisories/GHSA-h2x6-g7q6-344v.md)
  `GHSA-h2x6-g7q6-344v`, `CVE-2026-58442`, `GO-2026-6058` · Go `code.gitea.io/gitea`: affected `<1.27.0`, fixed in `1.27.0` · CVSS 6.5 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Information disclosure, Server-side request forgery (SSRF)
- [Gitea: SSRF in restore-repo via unsanitized pull_request.yml Head.CloneURL](https://agentprime.io/advisories/GHSA-xmj7-xj85-hfc3.md)
  `GHSA-xmj7-xj85-hfc3`, `CVE-2026-58441`, `GO-2026-6084` · Go `code.gitea.io/gitea`: affected `<1.27.0`, fixed in `1.27.0` · CVSS 6.3 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [LMDeploy Server-Side Request Forgery via HTTP Redirect Bypass](https://agentprime.io/advisories/CVE-2026-63764.md)
  `CVE-2026-63764` · CVE record: InternLM lmdeploy · CVSS 7.7 High · Not analysed yet · Published 21 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Gitea: SSRF via HTTP Redirect in Repository Migration](https://agentprime.io/advisories/GHSA-rqhx-647v-wx32.md)
  `GHSA-rqhx-647v-wx32`, `CVE-2026-58418`, `GO-2026-6075` · Go `code.gitea.io/gitea`: affected `<1.26.4`, fixed in `1.26.4` · CVSS 6.5 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Gitea: Incomplete SSRF Protection in Webhook and Migration Allow-list Default Filter](https://agentprime.io/advisories/GHSA-2r5c-gw76-rh3w.md)
  `GHSA-2r5c-gw76-rh3w`, `CVE-2026-22874`, `GO-2026-6030` · Go `code.gitea.io/gitea`: affected `<1.26.3`, fixed in `1.26.3` · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Gitea: Blind SSRF in OAuth2 avatar synchronization via unvalidated OIDC picture claim](https://agentprime.io/advisories/GHSA-x77v-q46j-393g.md)
  `GHSA-x77v-q46j-393g`, `CVE-2026-23603`, `GO-2026-6083` · Go `code.gitea.io/gitea`: affected `<1.27.0`, fixed in `1.27.0` · CVSS 3.1 Low · Not analysed yet · Published 21 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Gitea: Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository Exfiltration](https://agentprime.io/advisories/GHSA-82f7-87hm-852x.md)
  `GHSA-82f7-87hm-852x`, `CVE-2026-57894`, `GO-2026-6027` · Go `code.gitea.io/gitea`: affected `<1.27.0`, fixed in `1.27.0` · CVSS 8.5 High · Not analysed yet · Published 21 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Quay: mirror-registry: ssrf: repo-level mirror accepts external_reference without url validation](https://agentprime.io/advisories/CVE-2026-15927.md)
  `CVE-2026-15927` · CVE record: Red Hat Red Hat Quay 3.10 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 21 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Axios: NO_PROXY bypass for 0.0.0.0 local addresses in axios](https://agentprime.io/advisories/GHSA-f4gw-2p7v-4548.md)
  `GHSA-f4gw-2p7v-4548`, `CVE-2026-67315`, `CVE-2026-68946` · npm `axios`: affected `>=0.31.0, <0.33.0 || >=1.15.0, <1.18.0`, fixed in `0.33.0`, `1.18.0` · CVSS 6.9 Medium · Not analysed yet · Published 20 Jul 2026 · Tags: Server-side request forgery (SSRF), CWE-183
- [AVideo Encoder downloadURL SSRF via unpinned retry fallback](https://agentprime.io/advisories/CVE-2026-64626.md)
  `CVE-2026-64626` · CVE record: WWBN AVideo · CVSS 5.3 Medium · Not analysed yet · Published 20 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Directus: SSRF Protection Bypass via 0.0.0.0 in File Import](https://agentprime.io/advisories/GHSA-j5h6-vqc3-phqh.md)
  `GHSA-j5h6-vqc3-phqh`, `CVE-2026-61835` · npm `directus`: affected `<12.0.0`, fixed in `12.0.0` · CVSS 7.7 High · Not analysed yet · Published 20 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Cloudreve: Non-admin remote download users can SSRF loopback/internal services and read imported responses](https://agentprime.io/advisories/GHSA-x756-g4x3-c64m.md)
  `GHSA-x756-g4x3-c64m`, `CVE-2026-54562`, `GO-2026-6023` · Go `github.com/cloudreve/Cloudreve/v3` and 1 more: affected `<=3.0.0-20250225100611-da4e44b77af4`, no fixed version yet · CVSS 6.5 Medium · Not analysed yet · Published 20 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Huginn < 2026.09.09 SSRF via ScenarioImport fetch_url Method](https://agentprime.io/advisories/CVE-2026-63769.md)
  `CVE-2026-63769` · CVE record: huginn huginn · CVSS 6.3 Medium · Not analysed yet · Published 20 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [HyperDX < 2.31.0 SSRF via ClickHouse Proxy Test Endpoint](https://agentprime.io/advisories/CVE-2026-63731.md)
  `CVE-2026-63731` · CVE record: hyperdxio hyperdx · CVSS 6.3 Medium · Not analysed yet · Published 20 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [HyperDX < 2.31.0 SSRF via Webhook Test Endpoint](https://agentprime.io/advisories/CVE-2026-63730.md)
  `CVE-2026-63730` · CVE record: hyperdxio hyperdx · CVSS 5.3 Medium · Not analysed yet · Published 20 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [LimeSurvey SSRF via REST API Survey Template Host Header](https://agentprime.io/advisories/CVE-2026-63107.md)
  `CVE-2026-63107` · CVE record: LimeSurvey LimeSurvey · CVSS 6.3 Medium · Not analysed yet · Published 20 Jul 2026 · Tags: Server-side request forgery (SSRF)

Newest: <https://agentprime.io/advisories/tag/ssrf.md>
Older: <https://agentprime.io/advisories/tag/ssrf.md?cursor=WyIyMDI2LTA3LTIwVDE4OjE0OjAxLjYyNTAwMFoiLCJDVkUtMjAyNi02MzEwNyJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=ssrf&cursor=WyIyMDI2LTA3LTI3VDE5OjEzOjI5LjMyNDAwMFoiLCJDVkUtMjAyNi0xNjQ4MSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/ssrf/?cursor=WyIyMDI2LTA3LTI3VDE5OjEzOjI5LjMyNDAwMFoiLCJDVkUtMjAyNi0xNjQ4MSJd>. Everything for agents: <https://agentprime.io/llms.txt>.