# Server-side request forgery (SSRF).

The server made to send requests an attacker chooses. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Simple Google Calendar Outlook Events Widget < 3.1.0 - Unauthenticated SSRF via calendar_id](https://agentprime.io/advisories/CVE-2026-16536.md)
  `CVE-2026-16536` · CVE record: Unknown Simple Google Calendar Outlook Events Widget · CVSS 5.3 Medium · Not analysed yet · Published 4 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Microsoft Edge (Chromium-based) Spoofing Vulnerability](https://agentprime.io/advisories/CVE-2026-66325.md)
  `CVE-2026-66325` · CVE record: Microsoft Microsoft Edge (Chromium-based) · CVSS 6.1 Medium · Not analysed yet · Published 3 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)](https://agentprime.io/advisories/CVE-2026-48331.md)
  `CVE-2026-48331` · CVE record: Adobe Adobe Campaign Classic · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 3 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Guzzle: Noncanonical host can bypass host-based checks](https://agentprime.io/advisories/GHSA-v5mv-p594-2x33.md)
  `GHSA-v5mv-p594-2x33`, `CVE-2026-69246`, `PKSA-gcrk-3vtt-1r14` · Packagist `guzzlehttp/guzzle`: affected `<7.15.2 || >=8.0.0, <8.0.1`, fixed in `7.15.2`, `8.0.1` · CVSS 7.2 High · Not analysed yet · Published 3 Aug 2026 · Tags: Server-side request forgery (SSRF), CWE-180, CWE-436, CWE-941
- [jina-ai reader Crawler/Puppeteer crawler.ts isValidTLD server-side request forgery](https://agentprime.io/advisories/CVE-2026-18647.md)
  `CVE-2026-18647` · CVE record: jina-ai reader · CVSS 6.9 Medium · Not analysed yet · Published 3 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Shlink Server-Side Request Forgery via Short URL Title Auto-Resolution](https://agentprime.io/advisories/CVE-2026-18736.md)
  `CVE-2026-18736` · CVE record: shlinkio Shlink · CVSS 5.3 Medium · Not analysed yet · Published 3 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass](https://agentprime.io/advisories/GHSA-mwp4-54f8-5fhr.md)
  `GHSA-mwp4-54f8-5fhr`, `CVE-2026-69192` · npm `ip-address`: affected `<10.3.1`, fixed in `10.3.1` · CVSS 7.7 High · Not analysed yet · Published 3 Aug 2026 · Tags: Server-side request forgery (SSRF), CWE-20
- [ip-address: a CIDR suffix on the parsed address suppresses special-use classification and can bypass SSRF and trust-boundary checks](https://agentprime.io/advisories/GHSA-4xrf-jv44-h6hh.md)
  `GHSA-4xrf-jv44-h6hh`, `CVE-2026-69198` · npm `ip-address`: affected `>=10.1.1, <10.2.2`, fixed in `10.2.2` · CVSS 6.9 Medium · Not analysed yet · Published 3 Aug 2026 · Tags: Server-side request forgery (SSRF), CWE-20
- [ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses can bypass SSRF and trust-boundary checks](https://agentprime.io/advisories/GHSA-22jq-vg5j-6vgg.md)
  `GHSA-22jq-vg5j-6vgg`, `CVE-2026-54272` · npm `ip-address`: affected `>=10.1.1, <10.2.1`, fixed in `10.2.1` · CVSS 6.9 Medium · Not analysed yet · Published 3 Aug 2026 · Tags: Server-side request forgery (SSRF), CWE-20
- [Server-Side Request Forgery and Local File Disclosure in CTI-Transmute Evaluation PDF Rendering](https://agentprime.io/advisories/CVE-2026-69078.md)
  `CVE-2026-69078` · CVE record: misp cti-transmute · CVSS 8.8 High · Not analysed yet · Published 3 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Budibase before 3.38.1 SSRF Blacklist Bypass via HTTP Redirect](https://agentprime.io/advisories/CVE-2026-67311.md)
  `CVE-2026-67311` · CVE record: Budibase budibase · CVSS 8.2 High · Not analysed yet · Published 1 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Pixelavo < 1.5.4 - Unauthenticated Facebook CAPI Event Injection via pixelavo_event AJAX](https://agentprime.io/advisories/CVE-2026-13604.md)
  `CVE-2026-13604` · CVE record: Unknown Pixelavo · CVSS 5.3 Medium · Not analysed yet · Published 1 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [@apostrophecms/file pretty-URL Vulnerable to Unauthenticated SSRF via Host header](https://agentprime.io/advisories/GHSA-34pj-2622-jvxq.md)
  `GHSA-34pj-2622-jvxq`, `CVE-2026-53607` · npm `apostrophe`: affected `<4.31.0`, fixed in `4.31.0` · CVSS 3.7 Low · Not analysed yet · Published 31 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Thumbor treats ALLOWED_SOURCES string patterns as unescaped regex, allowing hostname bypass via wildcard dot](https://agentprime.io/advisories/GHSA-6x26-6r6f-m537.md)
  `GHSA-6x26-6r6f-m537`, `CVE-2026-53500`, `PYSEC-2026-3617` · PyPI `thumbor`: affected `<7.8.0`, fixed in `7.8.0` · CVSS 8.2 High · Not analysed yet · Published 31 Jul 2026 · Tags: Server-side request forgery (SSRF), Denial of service
- [vault-addr annotation SSRF -- webhook makes outbound HTTP call to attacker URL during admission; vault-serviceaccount enables cluster-wide SA token theft via TokenRequest API](https://agentprime.io/advisories/GHSA-r2v3-8gwf-7ghm.md)
  `GHSA-r2v3-8gwf-7ghm`, `CVE-2026-54725`, `GO-2026-6160` · Go `github.com/bank-vaults/vault-secrets-webhook`: affected `<1.23.1`, fixed in `1.23.1` · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 31 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [dssrf: any users using 1.1.1.1 DNS is impacted by SSRF](https://agentprime.io/advisories/GHSA-5846-7qm3-r52j.md)
  `GHSA-5846-7qm3-r52j`, `CVE-2026-54729` · npm `dssrf`: affected `<1.0.5`, fixed in `1.0.5` · CVSS 8.7 High · Not analysed yet · Published 31 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download / nltk.data.load) defeats ENFORCE mode](https://agentprime.io/advisories/GHSA-qvv7-cg9c-w4x3.md)
  `GHSA-qvv7-cg9c-w4x3`, `CVE-2026-12075`, `PYSEC-2026-3583` · PyPI `nltk`: affected `<3.10.0`, fixed in `3.10.0` · CVSS 8.6 High · Not analysed yet · Published 31 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Server-Side Request Forgery in Pentestify PDF export via unvalidated image URLs](https://agentprime.io/advisories/CVE-2026-59231.md)
  `CVE-2026-59231` · CVE record: ccyl13 Pentestify · CVSS 5.3 Medium · Not analysed yet · Published 31 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Server-Side Request Forgery via Unrestricted HTTP Redirection in MCP Toolbox](https://agentprime.io/advisories/CVE-2026-14540.md)
  `CVE-2026-14540` · CVE record: Google mcp-toolbox · CVSS 8.0 High · Not analysed yet · Published 31 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [A Server-Side Request Forgery (SSRF) in the xxl-job-admin/jobinfo/trigger component of xxl-job v3.4.0 allows authenticated attackers to scan resources via supplying a crafted HTTP request.](https://agentprime.io/advisories/CVE-2026-52371.md)
  `CVE-2026-52371` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 31 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [WACRM: SSRF via the automation \`send_webhook\` action](https://agentprime.io/advisories/CVE-2026-67530.md)
  `CVE-2026-67530` · CVE record: ArnasDon wacrm · CVSS 6.4 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [CVE-2026-15974](https://agentprime.io/advisories/CVE-2026-15974.md)
  `CVE-2026-15974` · CVE record: SGLang SGLang · CVSS 6.5 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [MaxKB: UpdateStoreTool fetches caller-supplied app-store URLs without host validation](https://agentprime.io/advisories/CVE-2026-64870.md)
  `CVE-2026-64870` · CVE record: 1Panel-dev MaxKB · CVSS 5.3 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Leantime Server-Side Request Forgery and Local File Inclusion in Blueprints::import()](https://agentprime.io/advisories/CVE-2026-66415.md)
  `CVE-2026-66415` · CVE record: Leantime Leantime · CVSS 8.4 High · Not analysed yet · Published 30 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Kanboard 1.2.52 and prior SSRF Filter Bypass via Hexadecimal IP Notation](https://agentprime.io/advisories/CVE-2026-57862.md)
  `CVE-2026-57862` · CVE record: Kanboard Kanboard · CVSS 8.4 High · Not analysed yet · Published 30 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Flyto2 Core: Guarded HTTP modules follow redirects into internal space without per-hop SSRF revalidation](https://agentprime.io/advisories/GHSA-c9hr-64h3-gxpc.md)
  `GHSA-c9hr-64h3-gxpc`, `CVE-2026-67424`, `PYSEC-2026-3569` · PyPI `flyto-core`: affected `<2.26.7`, fixed in `2.26.7` · CVSS 8.5 High · Not analysed yet · Published 30 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Flyto2 Core: Multiple HTTP-family modules fetch client-controlled URLs without the SSRF guard their siblings apply (SSRF to internal/metadata)](https://agentprime.io/advisories/GHSA-pgwh-4jj4-qm8v.md)
  `GHSA-pgwh-4jj4-qm8v`, `CVE-2026-67428`, `PYSEC-2026-3572` · PyPI `flyto-core`: affected `<2.26.7`, fixed in `2.26.7` · CVSS 8.5 High · Not analysed yet · Published 30 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Flyto2 Core: Unauthenticated flyto-verification /run: callback_url SSRF and internal runner-secret exfiltration](https://agentprime.io/advisories/GHSA-jx74-cqjv-2c67.md)
  `GHSA-jx74-cqjv-2c67`, `CVE-2026-67426`, `PYSEC-2026-3571` · PyPI `flyto-core`: affected `>=2.26.6, <2.26.7`, fixed in `2.26.7` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 30 Jul 2026 · Tags: Authentication bypass, Hard-coded credentials, Server-side request forgery (SSRF)
- [linuxfabrik-lib: fetch() forwards credential headers across a cross-origin redirect](https://agentprime.io/advisories/GHSA-4jc5-g844-4x33.md)
  `GHSA-4jc5-g844-4x33`, `CVE-2026-67435`, `PYSEC-2026-3578` · PyPI `linuxfabrik-lib`: affected `<6.0.0`, fixed in `6.0.0` · CVSS 6.0 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Information disclosure, Server-side request forgery (SSRF)
- [Swarms 6.8.1 Server-Side Request Forgery via DNS Rebinding Bypass](https://agentprime.io/advisories/CVE-2026-67346.md)
  `CVE-2026-67346` · CVE record: kyegomez swarms · CVSS 7.7 High · Not analysed yet · Published 30 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in Boruta OAuth request_uri and OpenID jwks_uri fetching](https://agentprime.io/advisories/GHSA-5q9h-vf5j-fr2g.md)
  `GHSA-5q9h-vf5j-fr2g`, `CVE-2026-54885`, `EEF-CVE-2026-54885` · Hex `boruta`: affected `>=2.3.2, <2.3.7`, fixed in `2.3.7` · CVSS 6.9 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Project-koku/koku-metrics-operator: koku-metrics-operator: service-account client credentials sent to user-controlled token_url](https://agentprime.io/advisories/CVE-2026-18382.md)
  `CVE-2026-18382` · CVE record: Red Hat Cost Management 4 · CVSS 6.8 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Project-koku/koku-metrics-operator: koku-metrics-operator: cluster pull-secret token exfiltration via user-controlled api_url (ssrf / confused deputy)](https://agentprime.io/advisories/CVE-2026-18378.md)
  `CVE-2026-18378` · CVE record: Red Hat Cost Management 4 · CVSS 7.6 High · Not analysed yet · Published 30 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Project-koku/koku-metrics-operator: koku-metrics-operator: operator service-account token exfiltration via user-controlled prometheus service_address](https://agentprime.io/advisories/CVE-2026-18381.md)
  `CVE-2026-18381` · CVE record: Red Hat Cost Management 4 · CVSS 7.6 High · Not analysed yet · Published 30 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Dogtag-pki: pki-core: redhat-pki: pki: acme http-01 validation ssrf via ip literal identifiers and unvalidated redirects](https://agentprime.io/advisories/CVE-2026-18369.md)
  `CVE-2026-18369` · CVE record: Red Hat Red Hat Certificate System 10.4 EUS for RHEL-8 and 4 more · CVSS 5.8 Medium · Not analysed yet · Published 30 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Unauthenticated SSRF in PIA via OIDC issuer allowlist bypass](https://agentprime.io/advisories/CVE-2026-18353.md)
  `CVE-2026-18353` · CVE record: Eclipse Foundation Eclipse CSI - PIA · CVSS 8.8 High · Not analysed yet · Published 30 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Linuxfabrik monitoring-plugins: SSRF and auth-token disclosure via unvalidated @odata.id link in redfish-\* plugins](https://agentprime.io/advisories/CVE-2026-67436.md)
  `CVE-2026-67436` · CVE record: Linuxfabrik monitoring-plugins · CVSS 8.3 High · Not analysed yet · Published 29 Jul 2026 · Tags: Information disclosure, Server-side request forgery (SSRF), CWE-20
- [consul-mcp-server vulnerable to server side request forgery leading to token exposure](https://agentprime.io/advisories/CVE-2026-16328.md)
  `CVE-2026-16328` · CVE record: HashiCorp Tooling · CVSS 8.6 High · Not analysed yet · Published 29 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Easy!Appointments has server-side request forgery in CalDAV connection test that exposes the deployment's internal network](https://agentprime.io/advisories/GHSA-pm5p-7w5h-jm5q.md)
  `GHSA-pm5p-7w5h-jm5q`, `CVE-2026-52840`, `PKSA-qvhv-yhm7-8xkk` · Packagist `alextselegidis/easyappointments`: affected `<1.6.1`, fixed in `1.6.1` · CVSS 2.7 Low · Not analysed yet · Published 29 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [prebid-server's request forgery vulnerability allows for possible host environment data extraction](https://agentprime.io/advisories/GHSA-4p3g-4hcj-wpvx.md)
  `GHSA-4p3g-4hcj-wpvx`, `CVE-2026-54735`, `GO-2026-6139` · Go `github.com/prebid/prebid-server` and 3 more: affected `<=0.275.0`, no fixed version yet · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [swagger-typescript-api vulnerable to Server-Side Request Forgery via spec \`$ref\`](https://agentprime.io/advisories/GHSA-x36r-4347-pm5x.md)
  `GHSA-x36r-4347-pm5x`, `CVE-2026-54663` · npm `swagger-typescript-api`: affected `<13.12.2`, fixed in `13.12.2` · CVSS 6.1 Medium · Not analysed yet · Published 29 Jul 2026 · Tags: Server-side request forgery (SSRF), CWE-20, CWE-441
- [swagger-typescript-api vulnerable to authorization-token exfiltration via spec \`$ref\`](https://agentprime.io/advisories/GHSA-h754-fxp7-88wx.md)
  `GHSA-h754-fxp7-88wx`, `CVE-2026-54660` · npm `swagger-typescript-api`: affected `<13.12.2`, fixed in `13.12.2` · CVSS 7.4 High · Not analysed yet · Published 29 Jul 2026 · Tags: Information disclosure, Hard-coded credentials, Server-side request forgery (SSRF)
- [WP CTA <= 2.1.2 - Authenticated (Administrator+) Server-Side Request Forgery](https://agentprime.io/advisories/CVE-2026-6089.md)
  `CVE-2026-6089` · CVE record: blendmedia WP CTA – Call Now Button, Sticky Button & Call to Action Builder · CVSS 4.9 Medium · Not analysed yet · Published 29 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Apache Traffic Server: Plugins resetting the redirect counter enable SSRF amplification](https://agentprime.io/advisories/CVE-2026-58189.md)
  `CVE-2026-58189` · CVE record: Apache Software Foundation Apache Traffic Server · CVSS 8.2 High · Not analysed yet · Published 29 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [datamodel-code-generator vulnerable to SSRF protection bypass via DNS rebinding](https://agentprime.io/advisories/GHSA-vx7x-vcc2-c44g.md)
  `GHSA-vx7x-vcc2-c44g`, `CVE-2026-55391`, `PYSEC-2026-3565` · PyPI `datamodel-code-generator`: affected `<0.63.0`, fixed in `0.63.0` · CVSS 7.5 High · Not analysed yet · Published 28 Jul 2026 · Tags: Race condition, Server-side request forgery (SSRF), CWE-350
- [datamodel-code-generator vulnerable to SSRF via JSON-Schema \`$ref\` to HTTP URL (silent by default)](https://agentprime.io/advisories/GHSA-954p-556p-r752.md)
  `GHSA-954p-556p-r752`, `CVE-2026-54690`, `PYSEC-2026-3560` · PyPI `datamodel-code-generator`: affected `>=0.9.1, <0.61.0`, fixed in `0.61.0` · CVSS 8.2 High · Not analysed yet · Published 28 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [datamodel-code-generator vulnerable to SSRF via --url: no host/IP validation, follows redirects](https://agentprime.io/advisories/GHSA-rfr2-mq9m-x2qx.md)
  `GHSA-rfr2-mq9m-x2qx`, `CVE-2026-54691`, `PYSEC-2026-3564` · PyPI `datamodel-code-generator`: affected `>=0.9.1, <0.61.0`, fixed in `0.61.0` · CVSS 8.2 High · Not analysed yet · Published 28 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Media Cleaner: Clean your WordPress! <= 7.0.3 - Authenticated (Administrator+) Server-Side Request Forgery](https://agentprime.io/advisories/CVE-2026-4912.md)
  `CVE-2026-4912` · CVE record: tigroumeow Media Cleaner: Clean your WordPress! · CVSS 4.1 Medium · Not analysed yet · Published 28 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [terraform-mcp-server vulnerable to server side request forgery leading to token exposure](https://agentprime.io/advisories/CVE-2026-14869.md)
  `CVE-2026-14869` · CVE record: HashiCorp Tooling · CVSS 8.6 High · Not analysed yet · Published 28 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [OAuth: Cross-origin token-request redirects can expose signed request metadata](https://agentprime.io/advisories/GHSA-prq8-7wvh-44qh.md)
  `GHSA-prq8-7wvh-44qh`, `CVE-2026-54605` · RubyGems `oauth`: affected `>=0.5.5, <1.1.6`, fixed in `1.1.6` · CVSS 7.2 High · Not analysed yet · Published 28 Jul 2026 · Tags: Information disclosure, Server-side request forgery (SSRF), CWE-346
- [@novu/application-generic: \`validateUrlSsrf\` permits CGNAT (100.64.0.0/10) destinations — affects Workflow HTTP request step + Webhook filter condition](https://agentprime.io/advisories/GHSA-vg6v-j97m-h5xq.md)
  `GHSA-vg6v-j97m-h5xq`, `CVE-2026-125115` · npm `@novu/application-generic`: affected `<3.17.0`, fixed in `3.17.0` · CVSS 6.8 Medium · Not analysed yet · Published 28 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [java-client Allows Network Pivot via Unvalidated directConnect Redirect in AppiumCommandExecutor](https://agentprime.io/advisories/GHSA-28f5-38xr-jh2w.md)
  `GHSA-28f5-38xr-jh2w`, `CVE-2026-43910` · Maven `io.appium:java-client`: affected `>=8.2.1, <10.1.1`, fixed in `10.1.1` · CVSS 8.2 High · Not analysed yet · Published 28 Jul 2026 · Tags: Server-side request forgery (SSRF), CWE-441
- [Pivotick Unvalidated Node Image URLs Allow Unintended Client-Side Requests](https://agentprime.io/advisories/CVE-2026-67173.md)
  `CVE-2026-67173` · CVE record: pivotick pivotick · CVSS 5.1 Medium · Not analysed yet · Published 28 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress FormCraft plugin <= 3.9.15 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-65442.md)
  `CVE-2026-65442` · CVE record: Subtle Web Inc FormCraft · CVSS 7.2 High · Not analysed yet · Published 27 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress Simple Link Directory Pro plugin <= 15.0.6 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-61953.md)
  `CVE-2026-61953` · CVE record: QuantumCloud Simple Link Directory Pro · CVSS 7.2 High · Not analysed yet · Published 27 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Potential server-side request forgery in Artifactory Ansible repository handling](https://agentprime.io/advisories/CVE-2026-65923.md)
  `CVE-2026-65923` · CVE record: jfrog artifactory · CVSS 6.8 Medium · Not analysed yet · Published 27 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Server-Side Request Forgery (SSRF) via Terraform Remote repository](https://agentprime.io/advisories/CVE-2026-65924.md)
  `CVE-2026-65924` · CVE record: jfrog artifactory · CVSS 6.5 Medium · Not analysed yet · Published 27 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Server-Side Request Forgery (SSRF) via JFrog Artifactory Cargo remote repository](https://agentprime.io/advisories/CVE-2026-65925.md)
  `CVE-2026-65925` · CVE record: jfrog artifactory · CVSS 6.5 Medium · Not analysed yet · Published 27 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Improper URL validation when handling specific URLs Pub, Terraform and Docker packages might lead to SSRF vulnerability](https://agentprime.io/advisories/CVE-2026-65618.md)
  `CVE-2026-65618` · CVE record: jfrog artifactory · CVSS 6.5 Medium · Not analysed yet · Published 27 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Server-Side Request Forgery (SSRF) and Credential Exfiltration in googleapis/mcp-toolbox cloud-healthcare-fhir-fetch-page Tool](https://agentprime.io/advisories/CVE-2026-16481.md)
  `CVE-2026-16481` · CVE record: Google MCP Toolbox for Databases (googleapis/mcp-toolbox) · CVSS 6.0 Medium · Not analysed yet · Published 27 Jul 2026 · Tags: Server-side request forgery (SSRF)

Newest: <https://agentprime.io/advisories/tag/ssrf.md>
Older: <https://agentprime.io/advisories/tag/ssrf.md?cursor=WyIyMDI2LTA3LTI3VDE5OjEzOjI5LjMyNDAwMFoiLCJDVkUtMjAyNi0xNjQ4MSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=ssrf&cursor=WyIyMDI2LTA4LTA0VDA2OjAwOjA5LjE1NTAwMFoiLCJDVkUtMjAyNi0xMDUyNiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/ssrf/?cursor=WyIyMDI2LTA4LTA0VDA2OjAwOjA5LjE1NTAwMFoiLCJDVkUtMjAyNi0xMDUyNiJd>. Everything for agents: <https://agentprime.io/llms.txt>.