# Server-side request forgery (SSRF).

The server made to send requests an attacker chooses. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Joomla Extension - themexpert.com - SSRF via remote download in JMedia Extension < 1.6.0](https://agentprime.io/advisories/CVE-2026-60033.md)
  `CVE-2026-60033` · CVE record: themexpert.com JMedia extension for Joomla · CVSS 5.1 Medium · Not analysed yet · Published 20 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Apache Syncope: Low-privileged authenticated SSRF in Connectors and Resources check](https://agentprime.io/advisories/CVE-2026-62418.md)
  `CVE-2026-62418` · CVE record: Apache Software Foundation Apache Syncope · CVSS 8.1 High · Not analysed yet · Published 20 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Duplicate Advisory: SurrealDB: Port-specific --deny-net rules silently bypassed on HTTP redirect](https://agentprime.io/advisories/GHSA-vq7c-3hc9-m5hr.md)
  `GHSA-vq7c-3hc9-m5hr` · crates.io `surrealdb`: affected `*`, no fixed version yet · CVSS 6.4 Medium · Withdrawn · Not analysed yet · Published 20 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [SurrealDB before 3.2.0 SSRF via JWKS URL hostname resolution](https://agentprime.io/advisories/CVE-2026-63736.md)
  `CVE-2026-63736` · CVE record: surrealdb surrealdb · CVSS 5.1 Medium · Not analysed yet · Published 20 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [FlareSolverr before version 3.4.7 contains a server-side request forgery (SSRF) vulnerability in the /v1 API endpoint.](https://agentprime.io/advisories/CVE-2026-51031.md)
  `CVE-2026-51031` · CVE record · CVSS 7.5 High · Not analysed yet · Published 20 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [1Panel-dev CordysCRM Third Party Edit Endpoint IntegrationConfigService.java getSqlBotSrc server-side request forgery](https://agentprime.io/advisories/CVE-2026-16223.md)
  `CVE-2026-16223` · CVE record: 1Panel-dev CordysCRM · CVSS 5.3 Medium · Not analysed yet · Published 19 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [1Panel-dev CordysCRM Third Party Endpoint TokenService.java server-side request forgery](https://agentprime.io/advisories/CVE-2026-16222.md)
  `CVE-2026-16222` · CVE record: 1Panel-dev CordysCRM · CVSS 5.3 Medium · Not analysed yet · Published 19 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Sipeed PicoClaw web_fetch web.go isPrivateOrRestrictedIP server-side request forgery](https://agentprime.io/advisories/CVE-2026-16196.md)
  `CVE-2026-16196` · CVE record: Sipeed PicoClaw · CVSS 5.3 Medium · Not analysed yet · Published 18 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [zhayujie CowAgent web_fetch.py WebFetch.execute server-side request forgery](https://agentprime.io/advisories/CVE-2026-16194.md)
  `CVE-2026-16194` · CVE record: zhayujie CowAgent · CVSS 5.3 Medium · Not analysed yet · Published 18 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [zevorn rt-claw http_request swarm.c receiver_thread server-side request forgery](https://agentprime.io/advisories/CVE-2026-16128.md)
  `CVE-2026-16128` · CVE record: zevorn rt-claw · CVSS 6.9 Medium · Not analysed yet · Published 18 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [zevorn rt-claw http_request tool_net.c claw_net_post server-side request forgery](https://agentprime.io/advisories/CVE-2026-16127.md)
  `CVE-2026-16127` · CVE record: zevorn rt-claw · CVSS 6.9 Medium · Not analysed yet · Published 18 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Duplicate Advisory: SurrealDB bypass of deny-net flags via redirect results in server-side request forgery (SSRF)](https://agentprime.io/advisories/GHSA-xhwm-9486-8rgr.md)
  `GHSA-xhwm-9486-8rgr` · crates.io `surrealdb`: affected `*`, no fixed version yet · CVSS 7.6 High · Withdrawn · Not analysed yet · Published 18 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [zevorn rt-claw http_request net.c claw_net_post server-side request forgery](https://agentprime.io/advisories/CVE-2026-16125.md)
  `CVE-2026-16125` · CVE record: zevorn rt-claw · CVSS 6.9 Medium · Not analysed yet · Published 18 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [nextlevelbuilder GoClaw web_fetch web_shared.go isPrivateIP server-side request forgery](https://agentprime.io/advisories/CVE-2026-16124.md)
  `CVE-2026-16124` · CVE record: nextlevelbuilder GoClaw · CVSS 5.3 Medium · Not analysed yet · Published 18 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Sipeed PicoClaw web.go web_fetch server-side request forgery](https://agentprime.io/advisories/CVE-2026-16084.md)
  `CVE-2026-16084` · CVE record: Sipeed PicoClaw · CVSS 6.9 Medium · Not analysed yet · Published 18 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [CloudTAK: Authenticated full-read SSRF in the /api/esri\* routes — user-controlled URL fetched with no IP-classification guard](https://agentprime.io/advisories/GHSA-r95q-fp26-h3hc.md)
  `GHSA-r95q-fp26-h3hc`, `CVE-2026-55177` · npm `@tak-ps/cloudtak`: affected `<13.10.0`, fixed in `13.10.0` · CVSS 7.6 High · Not analysed yet · Published 17 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [AstrBotDevs AstrBot Plugin Update plugin.py update_all_plugins server-side request forgery](https://agentprime.io/advisories/CVE-2026-16074.md)
  `CVE-2026-16074` · CVE record: AstrBotDevs AstrBot · CVSS 5.3 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [SSRF Protection Configuration Vulnerability](https://agentprime.io/advisories/CVE-2026-7754.md)
  `CVE-2026-7754` · CVE record: IBM Langflow OSS · CVSS 7.7 High · Not analysed yet · Published 17 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [TAK-PS-Stats Web UI: Authenticated full-read SSRF in CloudTAK basemap import (PUT /api/basemap) — no IP-classification guard](https://agentprime.io/advisories/GHSA-vqrw-qphh-p34v.md)
  `GHSA-vqrw-qphh-p34v`, `CVE-2026-54546` · npm `@tak-ps/cloudtak`: affected `<13.22.1`, fixed in `13.22.1` · CVSS 5.0 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [meta-ads-mcp: Server-Side Request Forgery (SSRF) in \`upload_ad_image\` via Unrestricted \`image_url\` Fetch](https://agentprime.io/advisories/GHSA-45gf-fjxp-cjpq.md)
  `GHSA-45gf-fjxp-cjpq`, `CVE-2026-54549`, `PYSEC-2026-3485` · PyPI `meta-ads-mcp`: affected `<1.0.115`, fixed in `1.0.115` · CVSS 8.3 High · Not analysed yet · Published 17 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Dendrite 0.13.8 SSRF via Unauthenticated Legacy Media Download Endpoint](https://agentprime.io/advisories/CVE-2026-63096.md)
  `CVE-2026-63096` · CVE record: matrix-org dendrite · CVSS 6.9 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [poco-ai poco-claw task.py run_task server-side request forgery](https://agentprime.io/advisories/CVE-2026-16016.md)
  `CVE-2026-16016` · CVE record: poco-ai poco-claw · CVSS 6.9 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Grav < 2.0.4 SSRF via Unrestricted cURL Protocols](https://agentprime.io/advisories/CVE-2026-62234.md)
  `CVE-2026-62234` · CVE record: getgrav grav · CVSS 8.4 High · Not analysed yet · Published 17 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [OpenClaw 2026.4.14 < 2026.5.26 SSRF via Browser Snapshot](https://agentprime.io/advisories/CVE-2026-62227.md)
  `CVE-2026-62227` · CVE record: OpenClaw OpenClaw · CVSS 4.9 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [OpenClaw 2026.3.28 < 2026.5.19 Authorization Bypass via Browser Act Route](https://agentprime.io/advisories/CVE-2026-62226.md)
  `CVE-2026-62226` · CVE record: OpenClaw OpenClaw · CVSS 5.1 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [OpenClaw 2026.4.20 < 2026.5.28 Policy Bypass via Media Upload](https://agentprime.io/advisories/CVE-2026-62216.md)
  `CVE-2026-62216` · CVE record: OpenClaw OpenClaw · CVSS 2.3 Low · Not analysed yet · Published 17 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [OpenClaw < 2026.6.6 Network Policy Bypass via exec-server](https://agentprime.io/advisories/CVE-2026-62201.md)
  `CVE-2026-62201` · CVE record: OpenClaw OpenClaw · CVSS 4.9 Medium · Not analysed yet · Published 17 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Xenforo 2.3.8 is vulnerable to SSRF.](https://agentprime.io/advisories/CVE-2026-51833.md)
  `CVE-2026-51833` · CVE record · CVSS 7.5 High · Not analysed yet · Published 17 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [ArcadeDB: IMPORT DATABASE allows SSRF and arbitrary local file read by authenticated users](https://agentprime.io/advisories/GHSA-8w86-m9h8-hvqg.md)
  `GHSA-8w86-m9h8-hvqg`, `CVE-2026-54077` · Maven `com.arcadedb:arcadedb-engine`: affected `<26.6.1`, fixed in `26.6.1` · CVSS 7.1 High · Not analysed yet · Published 16 Jul 2026 · Tags: Path traversal, Denial of service, Server-side request forgery (SSRF)
- [BigBlueButton: Presentation URL Security Hardening](https://agentprime.io/advisories/CVE-2026-46404.md)
  `CVE-2026-46404` · CVE record: bigbluebutton bigbluebutton · CVSS 6.8 Medium · Not analysed yet · Published 16 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [stoatchat < 0.14.0 SSRF via DNS-based IP Blocklist Bypass](https://agentprime.io/advisories/CVE-2026-63088.md)
  `CVE-2026-63088` · CVE record: stoatchat stoatchat · CVSS 7.7 High · Not analysed yet · Published 16 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [text-generation-inference 3.3.7 SSRF via fetch_image in multimodal chat completions](https://agentprime.io/advisories/CVE-2026-63086.md)
  `CVE-2026-63086` · CVE record: huggingface text-generation-inference · CVSS 6.9 Medium · Not analysed yet · Published 16 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [stoatchat before 0.13.5 Unauthenticated SSRF via proxy and embed endpoints](https://agentprime.io/advisories/CVE-2026-63306.md)
  `CVE-2026-63306` · CVE record: stoatchat stoatchat · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation)](https://agentprime.io/advisories/GHSA-pr64-jmmf-jp54.md)
  `GHSA-pr64-jmmf-jp54`, `CVE-2026-58196`, `GO-2026-6002` · Go `github.com/stacklok/toolhive`: affected `<0.31.0`, fixed in `0.31.0` · CVSS 4.7 Medium · Not analysed yet · Published 15 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [TensorZero Gateway: Arbitrary file read and SSRF in internal object storage endpoint](https://agentprime.io/advisories/GHSA-824w-x939-6cmc.md)
  `GHSA-824w-x939-6cmc`, `CVE-2026-54457`, `PYSEC-2026-3541` · PyPI `tensorzero`: affected `<2026.6.0`, fixed in `2026.6.0` · CVSS 7.7 High · Not analysed yet · Published 15 Jul 2026 · Tags: Information disclosure, Server-side request forgery (SSRF)
- [safeurl is Missing IPv6 CIDR Ranges in Blocklist](https://agentprime.io/advisories/GHSA-xgch-x3mx-cm3c.md)
  `GHSA-xgch-x3mx-cm3c`, `CVE-2026-54452`, `GO-2026-5997` · Go `github.com/doyensec/safeurl`: affected `<0.2.4`, fixed in `0.2.4` · CVSS 6.3 Medium · Not analysed yet · Published 15 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway](https://agentprime.io/advisories/GHSA-pph6-vfjv-vpjw.md)
  `GHSA-pph6-vfjv-vpjw`, `CVE-2026-54450`, `GO-2026-5996` · Go `github.com/stacklok/toolhive`: affected `<0.29.1`, fixed in `0.29.1` · CVSS 2.9 Low · Not analysed yet · Published 15 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Wekan: Server-Side Request Forgery (SSRF) via webhook integration URLs](https://agentprime.io/advisories/CVE-2026-53446.md)
  `CVE-2026-53446` · CVE record: wekan wekan · CVSS 6.2 Medium · Not analysed yet · Published 15 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Credential disclosure in Strands Agents Tools elasticsearch_memory tool](https://agentprime.io/advisories/CVE-2026-15746.md)
  `CVE-2026-15746` · CVE record: Amazon strands-agents-tools · CVSS 6.9 Medium · Not analysed yet · Published 15 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Koel: Full-read SSRF via podcast enclosure URL: isPublicHost() filter_var guard does not reject NAT64 (64:ff9b::/96) or 6to4 (2002::/16) IPv6-transition wrappers of internal IPv4](https://agentprime.io/advisories/GHSA-rjg7-r26h-cfp2.md)
  `GHSA-rjg7-r26h-cfp2`, `CVE-2026-54494`, `PKSA-nwpt-px6q-b5bv` · Packagist `phanan/koel`: affected `<9.7.1`, fixed in `9.7.1` · CVSS 5.3 Medium · Not analysed yet · Published 15 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Koel: Server-Side Request Forgery (SSRF) in radio station creation due to missing validation bail](https://agentprime.io/advisories/GHSA-jr4p-4xjh-fwvw.md)
  `GHSA-jr4p-4xjh-fwvw`, `CVE-2026-50552`, `PKSA-69y7-vwnx-px15` · Packagist `phanan/koel`: affected `<9.7.1`, fixed in `9.7.1` · CVSS 6.3 Medium · Not analysed yet · Published 15 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Koel: Incomplete fix for CVE-2026-47260 — systemic SSRF in podcast & radio fetch paths](https://agentprime.io/advisories/GHSA-6qvr-wjmv-v8mm.md)
  `GHSA-6qvr-wjmv-v8mm`, `CVE-2026-54491`, `PKSA-1qtf-pcfh-kb47` · Packagist `phanan/koel`: affected `<9.7.1`, fixed in `9.7.1` · CVSS 7.1 High · Not analysed yet · Published 15 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Koel has SSRF through Authenticated Subsonic podcast feed URLs](https://agentprime.io/advisories/GHSA-8q6q-m837-fv64.md)
  `GHSA-8q6q-m837-fv64`, `PKSA-74sr-w83z-r28d` · Packagist `phanan/koel`: affected `<9.7.0`, fixed in `9.7.0` · CVSS 6.4 Medium · Not analysed yet · Published 15 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Koel: Authenticated Full-Read SSRF via Subsonic Internet Radio Stations](https://agentprime.io/advisories/GHSA-6p96-cfg5-4vhp.md)
  `GHSA-6p96-cfg5-4vhp`, `CVE-2026-54493`, `PKSA-gv41-hnht-9yhw` · Packagist `phanan/koel`: affected `<9.7.0`, fixed in `9.7.0` · CVSS 7.7 High · Not analysed yet · Published 15 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Koel: Authenticated Blind SSRF via Subsonic Podcast Channel Creation](https://agentprime.io/advisories/GHSA-w79m-f3jx-779v.md)
  `GHSA-w79m-f3jx-779v`, `CVE-2026-54492`, `PKSA-drvx-ht86-w4b7` · Packagist `phanan/koel`: affected `<9.7.0`, fixed in `9.7.0` · CVSS 4.3 Medium · Not analysed yet · Published 15 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Penpot: Authenticated SSRF in remote image import via create-file-media-object-from-url](https://agentprime.io/advisories/CVE-2026-45806.md)
  `CVE-2026-45806` · CVE record: penpot penpot · CVSS 7.7 High · Not analysed yet · Published 15 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Vaultwarden: Server-side request forgery (SSRF) via Icon Endpoint Decimal/Hex/Octal IP Bypass](https://agentprime.io/advisories/CVE-2026-47160.md)
  `CVE-2026-47160` · CVE record: dani-garcia vaultwarden · CVSS 5.8 Medium · Not analysed yet · Published 15 Jul 2026 · Tags: Server-side request forgery (SSRF), CWE-1389
- [FastGPT: Shared axios SSRF guard validates only the initial URL before following redirects](https://agentprime.io/advisories/CVE-2026-61646.md)
  `CVE-2026-61646` · CVE record: labring FastGPT · CVSS 6.3 Medium · Not analysed yet · Published 15 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Duplicate Advisory: PraisonAI: DNS rebinding bypass in \`web_crawl\` SSRF protection allows internal response disclosure](https://agentprime.io/advisories/GHSA-92x2-g374-gcvx.md)
  `GHSA-92x2-g374-gcvx` · PyPI `praisonaiagents`: affected `<=1.6.77`, no fixed version yet · CVSS 8.5 High · Withdrawn · Not analysed yet · Published 15 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918)](https://agentprime.io/advisories/CVE-2026-48290.md)
  `CVE-2026-48290` · CVE record: Adobe Content Credentials Rust SDK and 2 more · CVSS 8.2 High · Not analysed yet · Published 14 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [mastergo-design mastergo-magic-mcp mcp\_\_getComponentLink get-component-link.ts z.string server-side request forgery](https://agentprime.io/advisories/CVE-2026-15750.md)
  `CVE-2026-15750` · CVE record: mastergo-design mastergo-magic-mcp · CVSS 5.3 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)](https://agentprime.io/advisories/CVE-2026-48332.md)
  `CVE-2026-48332` · CVE record: Adobe ColdFusion 2025 and 1 more · CVSS 7.7 High · Not analysed yet · Published 14 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Nebula-mesh allows non-admin operators to disable webhook SSRF protection via \`allow_private\`](https://agentprime.io/advisories/GHSA-7rx3-5wx3-5v76.md)
  `GHSA-7rx3-5wx3-5v76`, `CVE-2026-63464`, `GO-2026-5985` · Go `github.com/forgekeep/nebula-mesh`: affected `>=0.6.0, <0.7.2`, fixed in `0.7.2` · CVSS 7.7 High · Not analysed yet · Published 14 Jul 2026 · Tags: Broken access control, Server-side request forgery (SSRF)
- [Simple Machines Forum SSRF via image proxy](https://agentprime.io/advisories/CVE-2026-61520.md)
  `CVE-2026-61520` · CVE record: SimpleMachines SMF · CVSS 6.3 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in NVIDIA TensorRT-LLM](https://agentprime.io/advisories/CVE-2026-24234.md)
  `CVE-2026-24234` · CVE record: NVIDIA TensorRT-LLM · CVSS 6.8 Medium · Not analysed yet · Published 14 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [AWS HealthLake MCP Server SSRF via Pagination URL](https://agentprime.io/advisories/CVE-2026-15643.md)
  `CVE-2026-15643` · CVE record: AWS awslabs.healthlake-mcp-server · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Anyquery: Server-Side Request Forgery (SSRF) via Unrestricted SQLite Virtual Table Modules in Server Mode](https://agentprime.io/advisories/GHSA-hwrq-8wxh-q4xv.md)
  `GHSA-hwrq-8wxh-q4xv`, `CVE-2026-54628`, `GO-2026-5988` · Go `github.com/julien040/anyquery`: affected `*`, no fixed version yet · CVSS 8.6 High · Not analysed yet · Published 14 Jul 2026 · Tags: Broken access control, Server-side request forgery (SSRF), CWE-441
- [Server-side request forgery in SonicWall SMA1000](https://agentprime.io/advisories/CVE-2026-15409.md)
  `CVE-2026-15409` · CVE record: SonicWall SMA1000 · CVSS 10.0 Critical · Critical (KEV, CVSS 9+) · In CISA KEV, ransomware · Not analysed yet · Published 14 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Adobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918)](https://agentprime.io/advisories/CVE-2026-48259.md)
  `CVE-2026-48259` · CVE record: Adobe Adobe Experience Manager as a Cloud Service and 2 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 14 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges](https://agentprime.io/advisories/GHSA-xw9q-2mv6-9fr8.md)
  `GHSA-xw9q-2mv6-9fr8`, `CVE-2026-50131` · npm `@fedify/fedify` and 1 more: affected `>=0.11.2, <1.9.12 || >=1.10.0, <1.10.11 || >=2.0.0, <2.0.19 || >=2.1.0, <2.1.15 || >=2.2.0, <2.2.4`, fixed in `1.9.12`, `1.10.11`, `2.0.19`, `2.1.15`, `2.2.4` · CVSS 8.6 High · Not analysed yet · Published 14 Jul 2026 · Tags: Server-side request forgery (SSRF), CWE-1286, CWE-1389

Newest: <https://agentprime.io/advisories/tag/ssrf.md>
Older: <https://agentprime.io/advisories/tag/ssrf.md?cursor=WyIyMDI2LTA3LTE0VDE4OjE1OjI1LjAwMDAwMFoiLCJHSFNBLXh3OXEtMm12Ni05ZnI4Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=ssrf&cursor=WyIyMDI2LTA3LTIwVDE4OjE0OjAxLjYyNTAwMFoiLCJDVkUtMjAyNi02MzEwNyJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/ssrf/?cursor=WyIyMDI2LTA3LTIwVDE4OjE0OjAxLjYyNTAwMFoiLCJDVkUtMjAyNi02MzEwNyJd>. Everything for agents: <https://agentprime.io/llms.txt>.