# Server-side request forgery (SSRF).

The server made to send requests an attacker chooses. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Server-Side Request Forgery (SSRF) through the Report Notification REST API in Splunk Secure Gateway](https://agentprime.io/advisories/CVE-2026-76351.md)
  `CVE-2026-76351` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 8.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Server-Side Request Forgery (SSRF) through the Report Notifications REST API in Splunk Secure Gateway](https://agentprime.io/advisories/CVE-2026-76347.md)
  `CVE-2026-76347` · CVE record: Splunk Splunk Enterprise and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Termix: Server-Side Request Forgery via Proxy Connectivity Test](https://agentprime.io/advisories/CVE-2026-53549.md)
  `CVE-2026-53549` · CVE record: Termix-SSH Termix · CVSS 7.7 High · Not analysed yet · Published 19 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [SearXNG MCP Server: Additional hardened-mode SSRF bypasses](https://agentprime.io/advisories/GHSA-wppf-h75h-6pm6.md)
  `GHSA-wppf-h75h-6pm6`, `CVE-2026-54689` · npm `mcp-searxng`: affected `<1.2.1`, fixed in `1.2.1` · CVSS 6.3 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Information disclosure, Server-side request forgery (SSRF)
- [SearXNG MCP Server is Vulnerable to SSRF in web_url_read: the internal-address guard is disabled by default (MCP_HTTP_HARDEN off)](https://agentprime.io/advisories/GHSA-q87f-qc2r-2gw4.md)
  `GHSA-q87f-qc2r-2gw4`, `CVE-2026-54688` · npm `mcp-searxng`: affected `<1.2.1`, fixed in `1.2.1` · CVSS 6.5 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [GeoLens's authorization and cache-scope flaws disclose private dataset data and metadata to unauthorized users (fixed in 1.2.4)](https://agentprime.io/advisories/GHSA-p77j-g7h5-r2vw.md)
  `GHSA-p77j-g7h5-r2vw` · PyPI `geolens`: affected `<1.2.4`, fixed in `1.2.4` · No CVSS score · Not analysed yet · Published 19 Aug 2026 · Tags: Other injection, Information disclosure, Broken access control, Denial of service
- [Wekan: SSRF filter bypass via DNS-resolving hostname in outgoing webhooks (incomplete fix of CVE-2026-53446)](https://agentprime.io/advisories/CVE-2026-68558.md)
  `CVE-2026-68558` · CVE record: wekan wekan · CVSS 8.5 High · Not analysed yet · Published 19 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Contentful MCP Server: export_space/import_space tools pass LLM-controlled \`host\`/\`proxy\` args to CMA client, redirecting server PAT to attacker-controlled endpoint](https://agentprime.io/advisories/GHSA-2xhg-73j7-rrgx.md)
  `GHSA-2xhg-73j7-rrgx`, `CVE-2026-53957` · npm `@contentful/mcp-server` and 1 more: affected `<1.7.19`, fixed in `1.7.19` · CVSS 7.7 High · Not analysed yet · Published 19 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Cluster-proxy-addon: cluster-proxy-addon: unauthenticated ssrf to arbitrary managed-cluster services via public route](https://agentprime.io/advisories/CVE-2026-66794.md)
  `CVE-2026-66794` · CVE record: Red Hat multicluster engine for Kubernetes 2.10 and 4 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [keeper.sh Calendar version prior to 2.18.14 SSRF Guard Bypass via DNS Rebinding](https://agentprime.io/advisories/CVE-2026-75583.md)
  `CVE-2026-75583` · CVE record: ridafkih keeper.sh · CVSS 2.3 Low · Not analysed yet · Published 19 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Cisco Packaged Contact Center Enterprise & Cisco Unified Contact Center Enterprise Server-Side Request Forgery Vulnerability](https://agentprime.io/advisories/CVE-2026-20314.md)
  `CVE-2026-20314` · CVE record: Cisco Cisco Packaged Contact Center Enterprise and 1 more · CVSS 5.0 Medium · Not analysed yet · Published 19 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Grav API Plugin: Webhook SSRF via Unrestricted cURL Protocols](https://agentprime.io/advisories/CVE-2026-62668.md)
  `CVE-2026-62668` · CVE record: getgrav grav and 1 more · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in Dell OpenManage Enterprise](https://agentprime.io/advisories/CVE-2026-54794.md)
  `CVE-2026-54794` · CVE record: Dell OpenManage Enterprise · CVSS 7.2 High · Not analysed yet · Published 19 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [ArcadeDB before 26.8.1 Server-Side Request Forgery via LOAD CSV](https://agentprime.io/advisories/CVE-2026-76225.md)
  `CVE-2026-76225` · CVE record: ArcadeData arcadedb · CVSS 8.3 High · Not analysed yet · Published 19 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Authenticated Server-Side Request Forgery in AIL Framework Crawler Allows Access to Internal Network Resources](https://agentprime.io/advisories/CVE-2026-76164.md)
  `CVE-2026-76164` · CVE record: ail-project ail-framework · CVSS 7.1 High · Not analysed yet · Published 19 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Animation Addons for Elementor < 2.7.2 - Unauthenticated Server-Side Request Forgery](https://agentprime.io/advisories/CVE-2026-17565.md)
  `CVE-2026-17565` · CVE record: Unknown Animation Addons for Elementor · CVSS 7.2 High · Not analysed yet · Published 19 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [LibreNMS: SSRF-driven stored XSS via Oxidized API response fields in device showconfig page](https://agentprime.io/advisories/GHSA-7gww-x7fh-jf9j.md)
  `GHSA-7gww-x7fh-jf9j`, `CVE-2026-84189`, `PKSA-9d1b-7dzj-kkfs` · Packagist `librenms/librenms`: affected `<26.7.0`, fixed in `26.7.0` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Aug 2026 · Tags: Cross-site scripting (XSS), Server-side request forgery (SSRF)
- [Lemur: Incomplete fix for GHSA-v2wp-frmc-5q3v -- ACME authority update endpoint allows non-admin to replace \`acme_url\` with internal IP, bypassing allowlist](https://agentprime.io/advisories/GHSA-v5rc-cpwc-cfpr.md)
  `GHSA-v5rc-cpwc-cfpr`, `CVE-2026-71303`, `PYSEC-2026-3679` · PyPI `lemur`: affected `<1.9.3`, fixed in `1.9.3` · CVSS 7.7 High · Not analysed yet · Published 18 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Lemur: SSRF protection in certificate revocation checking bypassable via HTTP redirects and DNS rebinding (incomplete fix for GHSA-54vg-pfh7-jq95)](https://agentprime.io/advisories/GHSA-f3qq-49m6-rw8f.md)
  `GHSA-f3qq-49m6-rw8f`, `CVE-2026-70667`, `PYSEC-2026-3676` · PyPI `lemur`: affected `<1.9.3`, fixed in `1.9.3` · CVSS 6.3 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Race condition, Server-side request forgery (SSRF)
- [Lemur: Server-Side Request Forgery via the ACME client following server-controlled URLs](https://agentprime.io/advisories/GHSA-xpmj-wjcp-6pww.md)
  `GHSA-xpmj-wjcp-6pww`, `CVE-2026-70666`, `PYSEC-2026-3680` · PyPI `lemur`: affected `<1.9.3`, fixed in `1.9.3` · CVSS 7.4 High · Not analysed yet · Published 18 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [FUXA: SSRF hardening for \`device-webapi-request\`](https://agentprime.io/advisories/CVE-2026-65985.md)
  `CVE-2026-65985` · CVE record: frangoteam FUXA · CVSS 6.0 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [MobSF has SSRF port restriction bypass in assetlinks_check](https://agentprime.io/advisories/GHSA-95px-34x5-p37h.md)
  `GHSA-95px-34x5-p37h`, `CVE-2026-68927`, `PYSEC-2026-3690` · PyPI `mobsf`: affected `<4.5.1`, fixed in `4.5.1` · CVSS 3.0 Low · Not analysed yet · Published 18 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [MagicMirror: ssrf calendar .js](https://agentprime.io/advisories/GHSA-w6x9-28jw-hq7j.md)
  `GHSA-w6x9-28jw-hq7j`, `CVE-2026-63643` · npm `magicmirror`: affected `<2.37.0`, fixed in `2.37.0` · CVSS 6.3 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Server-side request forgery (SSRF), CWE-441
- [MagicMirror newsfeed Socket.IO notification allows blind server-side request forgery](https://agentprime.io/advisories/GHSA-998g-7v5w-cr7g.md)
  `GHSA-998g-7v5w-cr7g`, `CVE-2026-63642` · npm `magicmirror`: affected `<2.37.0`, fixed in `2.37.0` · CVSS 6.3 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Awx: webhook status callback ssrf leaks the git pat](https://agentprime.io/advisories/CVE-2026-71365.md)
  `CVE-2026-71365` · CVE record: Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8 and 4 more · CVSS 7.7 High · Not analysed yet · Published 18 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Automation-controller: automation-controller: kubernetes service account token exfiltration via hashicorp vault credential ssrf](https://agentprime.io/advisories/CVE-2026-12564.md)
  `CVE-2026-12564` · CVE record: Red Hat Red Hat Ansible Automation Platform 2.4 for RHEL 8 and 4 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [MyBB: IPv6 SSRF](https://agentprime.io/advisories/CVE-2026-45123.md)
  `CVE-2026-45123` · CVE record: mybb mybb · CVSS 4.3 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [RAGFlow < 0.26.3 - Server-Side Request Forgery via Agent Invoke Component](https://agentprime.io/advisories/CVE-2026-75898.md)
  `CVE-2026-75898` · CVE record: infiniflow ragflow · CVSS 8.4 High · Not analysed yet · Published 18 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress OttoKit plugin <= 1.1.35 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-32553.md)
  `CVE-2026-32553` · CVE record: Brainstorm Force OttoKit · CVSS 7.2 High · Not analysed yet · Published 18 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress PDF Smart Viewer for Elementor plugin <= 1.0.4 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-32473.md)
  `CVE-2026-32473` · CVE record: DeKnows PDF Smart Viewer for Elementor · CVSS 7.2 High · Not analysed yet · Published 18 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress \[Aotuman\] Grab WeChat Articles plugin <= 2.0.1 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-32467.md)
  `CVE-2026-32467` · CVE record: apoyl \[Aotuman\] Grab WeChat Articles · CVSS 6.0 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [ArcadeDB before 26.8.1 SSRF via IMPORT DATABASE validator bypass](https://agentprime.io/advisories/CVE-2026-75844.md)
  `CVE-2026-75844` · CVE record: ArcadeData arcadedb · CVSS 7.1 High · Not analysed yet · Published 18 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [SiYuan before v3.7.4 SSRF via IPv6 Transition Address Bypass](https://agentprime.io/advisories/CVE-2026-74905.md)
  `CVE-2026-74905` · CVE record: siyuan-note siyuan · CVSS 6.9 Medium · Not analysed yet · Published 18 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Apache SkyWalking MCP: SSRF via set_skywalking_url Tool and GraphQL Expression Injection in MCP Server](https://agentprime.io/advisories/CVE-2026-34884.md)
  `CVE-2026-34884` · CVE record: Apache Software Foundation Apache SkyWalking MCP · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [MLflow: Unauthenticated full-read SSRF in webhook delivery: \_validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)](https://agentprime.io/advisories/GHSA-7gwp-5pfp-969j.md)
  `GHSA-7gwp-5pfp-969j`, `BIT-mlflow-2026-64849`, `CVE-2026-64849`, `PYSEC-2026-3687` · PyPI `mlflow`: affected `>=3.3.0, <3.15.0`, fixed in `3.15.0` · CVSS 9.3 Critical · Critical (KEV, CVSS 9+, CVSS 7+ and EPSS) · In CISA KEV · EPSS 0.10 · Not analysed yet · Published 17 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [9Router: Authenticated Server-Side Request Forgery (SSRF) via OIDC Provider Test Endpoint](https://agentprime.io/advisories/GHSA-8g4w-4ffg-8vgx.md)
  `GHSA-8g4w-4ffg-8vgx`, `CVE-2026-56677` · npm `9router`: affected `<=0.5.4`, no fixed version yet · CVSS 8.6 High · Not analysed yet · Published 17 Aug 2026 · Tags: Authentication bypass, Server-side request forgery (SSRF)
- [Server-side request forgery in JetBrains IntelliJ IDEA](https://agentprime.io/advisories/CVE-2026-75054.md)
  `CVE-2026-75054` · CVE record: JetBrains IntelliJ IDEA · CVSS 6.3 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in JetBrains IntelliJ IDEA](https://agentprime.io/advisories/CVE-2026-75053.md)
  `CVE-2026-75053` · CVE record: JetBrains IntelliJ IDEA · CVSS 5.4 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [jae-jae fetcher-mcp URL Validation security-credentials fetch_urls server-side request forgery](https://agentprime.io/advisories/CVE-2026-74858.md)
  `CVE-2026-74858` · CVE record: jae-jae fetcher-mcp · CVSS 5.3 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in Roundcube Webmail](https://agentprime.io/advisories/CVE-2026-75006.md)
  `CVE-2026-75006` · CVE record: Roundcube Webmail · CVSS 5.8 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Kira-Pgr PromptShopMCP Image-Toolkit-MCP-Server server.py download_image server-side request forgery](https://agentprime.io/advisories/CVE-2026-74842.md)
  `CVE-2026-74842` · CVE record: Kira-Pgr PromptShopMCP · CVSS 5.3 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [WooMS <= 9.14 - Unauthenticated Server-Side Request Forgery and Sensitive Information Disclosure](https://agentprime.io/advisories/CVE-2026-13700.md)
  `CVE-2026-13700` · CVE record: Unknown WooMS · CVSS 5.9 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [jkawamoto mcp-florence2 \_\_init\_\_.py get_images server-side request forgery](https://agentprime.io/advisories/CVE-2026-19984.md)
  `CVE-2026-19984` · CVE record: jkawamoto mcp-florence2 · CVSS 5.3 Medium · Not analysed yet · Published 17 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [A blind SSRF attack in DataHub v.1.5.0.1 allows a remote attacker to execute arbitrary code via the server retrieving an image from a crafted URL, and it fails to return the content or any errors dir…](https://agentprime.io/advisories/CVE-2026-50775.md)
  `CVE-2026-50775` · CVE record · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [graphlit graphlit-mcp-server ssrf-test Endpoint tools.ts fetch server-side request forgery](https://agentprime.io/advisories/CVE-2026-19957.md)
  `CVE-2026-19957` · CVE record: graphlit graphlit-mcp-server · CVSS 5.3 Medium · Not analysed yet · Published 16 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [gomarble-ai facebook-ads-mcp-server server.py fetch_pagination_url server-side request forgery](https://agentprime.io/advisories/CVE-2026-19956.md)
  `CVE-2026-19956` · CVE record: gomarble-ai facebook-ads-mcp-server · CVSS 5.3 Medium · Not analysed yet · Published 16 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [stoatchat before 0.15.0 SSRF via IPv6 unspecified address bypass](https://agentprime.io/advisories/CVE-2026-73058.md)
  `CVE-2026-73058` · CVE record: stoatchat stoatchat · CVSS 6.9 Medium · Not analysed yet · Published 16 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Royal Addons for Elementor <= 1.7.1064 - Authenticated (Contributor+) Server-Side Request Forgery via Form Builder Widget 'webhook_url' Setting](https://agentprime.io/advisories/CVE-2026-17123.md)
  `CVE-2026-17123` · CVE record: wproyal Royal Addons for Elementor – Addons and Templates Kit for Elementor · CVSS 8.8 High · Not analysed yet · Published 16 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [OpenBoxes Product Upload Endpoint ProductController.groovy upload server-side request forgery](https://agentprime.io/advisories/CVE-2026-19927.md)
  `CVE-2026-19927` · CVE record: OpenBoxes · CVSS 5.3 Medium · Not analysed yet · Published 16 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Quay: ssrf via build archive_url in quay build api](https://agentprime.io/advisories/CVE-2026-74247.md)
  `CVE-2026-74247` · CVE record: Red Hat Red Hat OpenShift Update Service and 1 more · CVSS 4.2 Medium · Not analysed yet · Published 14 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [ContextForge: DNS TOCTOU race condition causes SSRF protection bypass (\`/admin/gateways/test\`)](https://agentprime.io/advisories/GHSA-9hgc-g3w5-67cm.md)
  `GHSA-9hgc-g3w5-67cm`, `CVE-2026-53708`, `PYSEC-2026-3684` · PyPI `mcp-contextforge-gateway`: affected `<1.0.3`, fixed in `1.0.3` · CVSS 6.6 Medium · Not analysed yet · Published 14 Aug 2026 · Tags: Race condition, Server-side request forgery (SSRF), CWE-350
- [Budibase: SSRF in Automation Steps - Webhook, Zapier, N8N, Slack, Discord Bypass IP Blacklist](https://agentprime.io/advisories/GHSA-5fpj-28rv-84r7.md)
  `GHSA-5fpj-28rv-84r7`, `CVE-2026-35219` · npm `@budibase/server`: affected `<3.41.3`, fixed in `3.41.3` · CVSS 7.1 High · Not analysed yet · Published 14 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [feedmob fm-mcp-servers Download Endpoint index.ts downloadReport server-side request forgery](https://agentprime.io/advisories/CVE-2026-19770.md)
  `CVE-2026-19770` · CVE record: feedmob fm-mcp-servers · CVSS 4.8 Medium · Not analysed yet · Published 14 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [eyaushev swagger-testcase-mcp fetch_swagger swagger-parser.ts loadSource server-side request forgery](https://agentprime.io/advisories/CVE-2026-19765.md)
  `CVE-2026-19765` · CVE record: eyaushev swagger-testcase-mcp · CVSS 5.3 Medium · Not analysed yet · Published 14 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Model Context Protocol mcp-rdf-explorer MCP Server server.py explore_url server-side request forgery](https://agentprime.io/advisories/CVE-2026-19753.md)
  `CVE-2026-19753` · CVE record: Model Context Protocol mcp-rdf-explorer · CVSS 6.9 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [EnzoVezzaro mcp-dominican-layer PDF Parsing index.ts parse-pdf server-side request forgery](https://agentprime.io/advisories/CVE-2026-19752.md)
  `CVE-2026-19752` · CVE record: EnzoVezzaro mcp-dominican-layer · CVSS 5.3 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [EnzoVezzaro mcp-dominican-layer parse-csv tool index.ts axios.get server-side request forgery](https://agentprime.io/advisories/CVE-2026-19751.md)
  `CVE-2026-19751` · CVE record: EnzoVezzaro mcp-dominican-layer · CVSS 5.3 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Flyto2 Core < 2.28.0 SSRF Guard Bypass via is_private_ip()](https://agentprime.io/advisories/CVE-2026-73530.md)
  `CVE-2026-73530` · CVE record: flytohub flyto-core · CVSS 6.3 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Next AI Draw.io 0.4.16 SSRF via DNS Rebinding in parse-url](https://agentprime.io/advisories/CVE-2026-72777.md)
  `CVE-2026-72777` · CVE record: DayuanJiang next-ai-draw-io · CVSS 7.7 High · Not analysed yet · Published 13 Aug 2026 · Tags: Server-side request forgery (SSRF)
- [Pydantic AI: Unvalidated UploadedFile references in UI adapters allow server-side file access using the application's credentials](https://agentprime.io/advisories/GHSA-h7p7-w5gc-xj3w.md)
  `GHSA-h7p7-w5gc-xj3w`, `CVE-2026-54249`, `PYSEC-2026-3692`, `PYSEC-2026-3693` · PyPI `pydantic-ai` and 1 more: affected `>=1.65.0, <1.106.0 || >=2.0.0b1, <2.0.0b6`, fixed in `1.106.0`, `2.0.0b6` · CVSS 6.8 Medium · Not analysed yet · Published 13 Aug 2026 · Tags: Server-side request forgery (SSRF)

Newest: <https://agentprime.io/advisories/tag/ssrf.md>
Older: <https://agentprime.io/advisories/tag/ssrf.md?cursor=WyIyMDI2LTA4LTEzVDE0OjE2OjI2LjAwMDAwMFoiLCJHSFNBLWg3cDctdzVnYy14ajN3Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=ssrf&cursor=WyIyMDI2LTA4LTE5VDIxOjM0OjUxLjY2OTAwMFoiLCJDVkUtMjAyNi03NjM2MSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/ssrf/?cursor=WyIyMDI2LTA4LTE5VDIxOjM0OjUxLjY2OTAwMFoiLCJDVkUtMjAyNi03NjM2MSJd>. Everything for agents: <https://agentprime.io/llms.txt>.