# Server-side request forgery (SSRF).

The server made to send requests an attacker chooses. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Adobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918)](https://agentprime.io/advisories/CVE-2026-82000.md)
  `CVE-2026-82000` · CVE record: Adobe AEM 6.5 Forms JEE and 1 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Adobe Experience Manager Forms JEE | Server-Side Request Forgery (SSRF) (CWE-918)](https://agentprime.io/advisories/CVE-2026-81999.md)
  `CVE-2026-81999` · CVE record: Adobe AEM 6.5 Forms JEE and 1 more · CVSS 8.7 High · Not analysed yet · Published 22 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [MCP Atlassian: Incomplete fix for CVE-2026-27826: DNS rebinding bypasses SSRF validation (validated IP not pinned)](https://agentprime.io/advisories/CVE-2026-77242.md)
  `CVE-2026-77242` · CVE record: sooperset mcp-atlassian · CVSS 7.5 High · Not analysed yet · Published 22 Sept 2026 · Tags: Race condition, Server-side request forgery (SSRF)
- [Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)](https://agentprime.io/advisories/CVE-2026-83660.md)
  `CVE-2026-83660` · CVE record: Adobe Adobe Campaign Classic · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)](https://agentprime.io/advisories/CVE-2026-82013.md)
  `CVE-2026-82013` · CVE record: Adobe Adobe Campaign Classic · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)](https://agentprime.io/advisories/CVE-2026-82443.md)
  `CVE-2026-82443` · CVE record: Adobe Adobe Campaign Classic · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [dgtlmoon changedetection.io Preview Endpoint \_\_init\_\_.py add_watch_ui_snapshot server-side request forgery](https://agentprime.io/advisories/CVE-2026-95656.md)
  `CVE-2026-95656` · CVE record: dgtlmoon changedetection.io · CVSS 6.9 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [FastGPT safe axios SSRF guard still allows DNS rebinding TOCTOU on protected outbound requests](https://agentprime.io/advisories/CVE-2026-84301.md)
  `CVE-2026-84301` · CVE record: labring FastGPT · CVSS 6.3 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Novu: Server-Side Request Forgery (SSRF) via Chat Provider Webhook URLs](https://agentprime.io/advisories/CVE-2026-75511.md)
  `CVE-2026-75511` · CVE record: novuhq novu and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Lantronix Autonomous Out-of-Band Devices WebTelnet SSRF via rooturl Parameter](https://agentprime.io/advisories/CVE-2026-80150.md)
  `CVE-2026-80150` · CVE record: LANTRONIX SLC8000 and 4 more · CVSS 7.7 High · Not analysed yet · Published 22 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Lantronix Autonomous Out-of-Band Devices WebSSH SSRF via rooturl Parameter](https://agentprime.io/advisories/CVE-2026-80149.md)
  `CVE-2026-80149` · CVE record: LANTRONIX SLC8000 and 4 more · CVSS 7.7 High · Not analysed yet · Published 22 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Lantronix Autonomous Out-of-Band Devices WebSSH SSRF via Username Truncation](https://agentprime.io/advisories/CVE-2026-80148.md)
  `CVE-2026-80148` · CVE record: LANTRONIX SLC8000 and 4 more · CVSS 7.7 High · Not analysed yet · Published 22 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [@aborruso/ckan-mcp-server has SSRF via DNS-name → internal IP — incomplete fix of CVE-2026-53509](https://agentprime.io/advisories/GHSA-798p-78g2-v556.md)
  `GHSA-798p-78g2-v556`, `CVE-2026-61612` · npm `@aborruso/ckan-mcp-server`: affected `<0.4.108`, fixed in `0.4.108` · CVSS 5.7 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [MISP Unauthenticated Blind SSRF via XML Body Processing](https://agentprime.io/advisories/CVE-2026-95679.md)
  `CVE-2026-95679` · CVE record: MISP MISP · CVSS 6.9 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Server-side request forgery (SSRF), CWE-20
- [Tauri framework v2 SSRF Protection Bypass via HTTP Redirects](https://agentprime.io/advisories/CVE-2026-95623.md)
  `CVE-2026-95623` · CVE record: Tauri tauri-plugin-http · CVSS 5.6 Medium · Not analysed yet · Published 22 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [MaxKB: Authenticated full-read SSRF via the knowledge web-document import/sync crawler (Fork.fork requests.get, no internal-IP guard, non-blind)](https://agentprime.io/advisories/CVE-2026-77522.md)
  `CVE-2026-77522` · CVE record: 1Panel-dev MaxKB · CVSS 4.3 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [InvenTree: Administrative staff users can trigger Arbitrary File Read leading to Credential Disclosure](https://agentprime.io/advisories/CVE-2026-61749.md)
  `CVE-2026-61749` · CVE record: inventree InvenTree · CVSS 6.5 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: Information disclosure, Server-side request forgery (SSRF)
- [HomeBox: Notifier SSRF guard misses NAT64 prefixes (64:ff9b::/96, 64:ff9b:1::/48) — generic:// URL reaches cloud metadata on NAT64 egress](https://agentprime.io/advisories/CVE-2026-55473.md)
  `CVE-2026-55473` · CVE record: sysadminsmedia homebox · CVSS 6.0 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [draw.io: Unauthenticated SSRF via IPv6 ULA blocklist bypass in /embed2.js](https://agentprime.io/advisories/CVE-2026-76898.md)
  `CVE-2026-76898` · CVE record: jgraph drawio · CVSS 7.7 High · Not analysed yet · Published 21 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [draw.io: SSRF via DNS rebinding in ProxyServlet bypasses private IP blocklist](https://agentprime.io/advisories/CVE-2026-63334.md)
  `CVE-2026-63334` · CVE record: jgraph drawio · CVSS 6.8 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: Race condition, Server-side request forgery (SSRF)
- [MISP Arbitrary Local File Read and SSRF via MISP Export Upload](https://agentprime.io/advisories/CVE-2026-94401.md)
  `CVE-2026-94401` · CVE record: MISP MISP · CVSS 8.3 High · Not analysed yet · Published 21 Sept 2026 · Tags: Path traversal, Server-side request forgery (SSRF)
- [A Server-Side Request Forgery (SSRF) in the serverRequest function of nocobase v2.1.21 allows authenticated attackers to scan internal resources via a crafted HTTP request.](https://agentprime.io/advisories/CVE-2026-88403.md)
  `CVE-2026-88403` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 21 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [CuteNews v.2.1.2 is vulnerable to Server-Side Request Forgery (SSRF) in core/modules/media.php -- upload_from_inet (Media Manager's "Upload by URL" functionality).](https://agentprime.io/advisories/CVE-2026-36469.md)
  `CVE-2026-36469` · CVE record · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [0717376 cowork_bench pdf-tools-mcp server.py ControlFlowNode server-side request forgery](https://agentprime.io/advisories/CVE-2026-94051.md)
  `CVE-2026-94051` · CVE record: 0717376 cowork_bench · CVSS 5.3 Medium · Not analysed yet · Published 20 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [vas3k TaxHacker actions.ts testLLMProviderAction server-side request forgery](https://agentprime.io/advisories/CVE-2026-94040.md)
  `CVE-2026-94040` · CVE record: vas3k TaxHacker · CVSS 6.9 Medium · Not analysed yet · Published 20 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [vas3k TaxHacker Invoice PDF Renderer actions.ts generateInvoicePDF server-side request forgery](https://agentprime.io/advisories/CVE-2026-94039.md)
  `CVE-2026-94039` · CVE record: vas3k TaxHacker · CVSS 6.9 Medium · Not analysed yet · Published 20 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [NonceGeek dim-sum-app Deno Backend main.tsx textSearchV2Handler server-side request forgery](https://agentprime.io/advisories/CVE-2026-94038.md)
  `CVE-2026-94038` · CVE record: NonceGeek dim-sum-app · CVSS 6.9 Medium · Not analysed yet · Published 20 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [mealie-recipes Mealie Recipe Action Trigger controller_group_recipe_actions.py payload.model_dump server-side request forgery](https://agentprime.io/advisories/CVE-2026-94028.md)
  `CVE-2026-94028` · CVE record: mealie-recipes Mealie · CVSS 5.3 Medium · Not analysed yet · Published 20 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Import and export users and customers < 2.4.5 - Admin+ SSRF via bp_avatar](https://agentprime.io/advisories/CVE-2026-16542.md)
  `CVE-2026-16542` · CVE record: Unknown Import and export users and customers · CVSS 4.1 Medium · Not analysed yet · Published 20 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Wow Elements Addons for Elementor <= 1.11.2 - Authenticated (Contributor+) Server-Side Request Forgery via Changelog File Setting](https://agentprime.io/advisories/CVE-2026-1641.md)
  `CVE-2026-1641` · CVE record: wowelements Wow Elements Addons for Elementor · CVSS 6.5 Medium · Not analysed yet · Published 19 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Openshift/console: openshift/console: unauthenticated ssrf and resource exhaustion via devfile parser endpoint](https://agentprime.io/advisories/CVE-2026-75885.md)
  `CVE-2026-75885` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [CordysCRM: SSRF via Approval Flow Webhook Execution due to Missing SSRF Validation at Runtime](https://agentprime.io/advisories/CVE-2026-76900.md)
  `CVE-2026-76900` · CVE record: 1Panel-dev CordysCRM · CVSS 6.8 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [IBM i is Affected By Denial of Service and Security Restriction Bypass Vulnerabilities in FTP \[, \]](https://agentprime.io/advisories/CVE-2026-18869.md)
  `CVE-2026-18869` · CVE record: IBM i · CVSS 6.4 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Obot: Server-Side Request Forgery via remote MCP server URL](https://agentprime.io/advisories/GHSA-jgh3-fggc-mcpm.md)
  `GHSA-jgh3-fggc-mcpm`, `CVE-2026-101064`, `GO-2026-6522` · Go `github.com/obot-platform/obot`: affected `<0.23.0`, fixed in `0.23.0` · CVSS 8.3 High · Not analysed yet · Published 18 Sept 2026 · Tags: Server-side request forgery (SSRF), CWE-1188
- [LMDeploy has an SSRF bypass](https://agentprime.io/advisories/GHSA-39wr-7q6h-cf68.md)
  `GHSA-39wr-7q6h-cf68` · PyPI `lmdeploy`: affected `>=0.12.3, <0.15.0`, fixed in `0.15.0` · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: Server-side request forgery (SSRF), CWE-436
- [SveltyCMS File Upload Endpoint upload-media server-side request forgery](https://agentprime.io/advisories/CVE-2026-93506.md)
  `CVE-2026-93506` · CVE record: SveltyCMS · CVSS 5.3 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [ArcadeDB before 26.9.1 SSRF via IPv6 transition addresses](https://agentprime.io/advisories/CVE-2026-93597.md)
  `CVE-2026-93597` · CVE record: ArcadeData arcadedb · CVSS 5.3 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in Synology DiskStation Manager (DSM)](https://agentprime.io/advisories/CVE-2026-40537.md)
  `CVE-2026-40537` · CVE record: Synology DiskStation Manager (DSM) · CVSS 4.3 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [HCL BigFix Service Management is affected by multiple security vulnerabilities.](https://agentprime.io/advisories/CVE-2026-67101.md)
  `CVE-2026-67101` · CVE record: HCL Software HCL BigFix Service Management · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 18 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Auto Upload Images <= 3.3.2 - Authenticated (Contributor+) Server-Side Request Forgery via 'src' Attribute of \<img> Tags](https://agentprime.io/advisories/CVE-2026-12106.md)
  `CVE-2026-12106` · CVE record: airani Auto Upload Images · CVSS 6.4 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Generate PDF using Contact Form 7 < 4.2.2 - Unauthenticated Server-Side Request Forgery via Array-Valued Form Field](https://agentprime.io/advisories/CVE-2026-90984.md)
  `CVE-2026-90984` · CVE record: Unknown Generate PDF using Contact Form 7 · CVSS 5.8 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in Nextcloud Server](https://agentprime.io/advisories/CVE-2026-77164.md)
  `CVE-2026-77164` · CVE record: Nextcloud Server · CVSS 6.2 Medium · Not analysed yet · Published 18 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Azure AI Foundry Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-85917.md)
  `CVE-2026-85917` · CVE record: Microsoft Azure AI Foundry · CVSS 7.5 High · Not analysed yet · Published 17 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Prebid Server Java: Vulnerability to request forgery allows for possible host environment data extraction](https://agentprime.io/advisories/CVE-2026-54734.md)
  `CVE-2026-54734` · CVE record: prebid prebid-server-java · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 17 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Vvveb oEmbedProxy vulnerable to server-side request forgery](https://agentprime.io/advisories/CVE-2026-54507.md)
  `CVE-2026-54507` · CVE record: givanz Vvveb · CVSS 8.4 High · Not analysed yet · Published 17 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in Google Chrome](https://agentprime.io/advisories/CVE-2026-93384.md)
  `CVE-2026-93384` · CVE record: Google Chrome · CVSS 3.7 Low · Not analysed yet · Published 17 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Glean: Server-Side Request Forgery (SSRF) with Full Response Disclosure via Malicious RSS Feed in /api/feeds/discover](https://agentprime.io/advisories/CVE-2026-54339.md)
  `CVE-2026-54339` · CVE record: LeslieLeung glean · CVSS 7.7 High · Not analysed yet · Published 17 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [rhwp browser extension performs SSRF / private-network requests and leaks HWP preview data to untrusted pages](https://agentprime.io/advisories/CVE-2026-54565.md)
  `CVE-2026-54565` · CVE record: edwardkim rhwp · CVSS 4.7 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Information disclosure, Server-side request forgery (SSRF), CWE-1385
- [NetBox Device Type Library: PR-controllable upstream clone URL (NETBOX_DT_LIBRARY_URL) enables SSRF and test-data substitution from CI](https://agentprime.io/advisories/CVE-2026-54918.md)
  `CVE-2026-54918` · CVE record: netbox-community devicetype-library · CVSS 5.3 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Server-side request forgery (SSRF), CWE-15, CWE-829
- [oras-go: Blind SSRF via unvalidated Link header URL in pagination allows internal network probing](https://agentprime.io/advisories/GHSA-h7vf-4x9w-h99v.md)
  `GHSA-h7vf-4x9w-h99v`, `CVE-2026-85732`, `GO-2026-6497` · Go `oras.land/oras-go/v2`: affected `<2.6.2`, fixed in `2.6.2` · CVSS 4.7 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Kestra: SSRF via Pebble http() function allows unauthenticated access to internal services & cloud metadata](https://agentprime.io/advisories/GHSA-r56g-q4p6-m3p6.md)
  `GHSA-r56g-q4p6-m3p6`, `CVE-2026-73247` · Maven `io.kestra:core` and 1 more: affected `<=1.3.31`, no fixed version yet · CVSS 8.6 High · Not analysed yet · Published 17 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [pgAdmin 4: Connection-string injection via the database field in the Restore and Maintenance tools](https://agentprime.io/advisories/CVE-2026-86862.md)
  `CVE-2026-86862` · CVE record: pgadmin.org pgAdmin 4 · CVSS 7.1 High · Not analysed yet · Published 17 Sept 2026 · Tags: Command injection, Hard-coded credentials, Server-side request forgery (SSRF)
- [LiteLLM Proxy has server-side request forgery via the \`user_config\` request parameter](https://agentprime.io/advisories/GHSA-hx8v-g79f-8w5f.md)
  `GHSA-hx8v-g79f-8w5f`, `CVE-2026-59823`, `PYSEC-2026-4070` · PyPI `litellm`: affected `<1.83.9`, fixed in `1.83.9` · CVSS 5.3 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Nuxt OG Image has unauthenticated SSRF via \`fonts\[\].path\` URL parameter](https://agentprime.io/advisories/GHSA-q8hw-4fvp-9rwv.md)
  `GHSA-q8hw-4fvp-9rwv`, `CVE-2026-61793` · npm `nuxt-og-image`: affected `>=6.0.2, <6.7.0`, fixed in `6.7.0` · CVSS 6.9 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Server-side request forgery (SSRF), CWE-20, CWE-441, CWE-749
- [Server-side request forgery in Dell OpenManage Server Administrator Managed Node (Patch) for Windows and others](https://agentprime.io/advisories/CVE-2026-81446.md)
  `CVE-2026-81446` · CVE record: Dell OpenManage Server Administrator Managed Node (Patch) for Windows and 4 more · CVSS 7.4 High · Not analysed yet · Published 17 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in Dell OpenManage Server Administrator Managed Node (Patch) for Windows and others](https://agentprime.io/advisories/CVE-2026-81443.md)
  `CVE-2026-81443` · CVE record: Dell OpenManage Server Administrator Managed Node (Patch) for Windows and 4 more · CVSS 6.4 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress Unlimited Elements For Elementor (Free Widgets, Addons, Templates) plugin <= 2.0.19 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-66608.md)
  `CVE-2026-66608` · CVE record: Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) · CVSS 6.4 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [MISP sachertortephp Xml::build() Operator Precedence Bypass Allows Unintended HTTPS SSRF When readFile Is Disabled](https://agentprime.io/advisories/CVE-2026-92932.md)
  `CVE-2026-92932` · CVE record: misp sachertortephp · CVSS 5.1 Medium · Not analysed yet · Published 17 Sept 2026 · Tags: Server-side request forgery (SSRF), CWE-670
- [HKUDS nanobot before 0.3.0 Server-Side Request Forgery via WebFetchTool](https://agentprime.io/advisories/CVE-2026-92576.md)
  `CVE-2026-92576` · CVE record: HKUDS nanobot · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [changedetection.io through 0.60.6 SSRF via browser-step Goto URL](https://agentprime.io/advisories/CVE-2026-92815.md)
  `CVE-2026-92815` · CVE record: dgtlmoon changedetection.io · CVSS 8.7 High · Not analysed yet · Published 16 Sept 2026 · Tags: Server-side request forgery (SSRF)

Newest: <https://agentprime.io/advisories/tag/ssrf.md>
Older: <https://agentprime.io/advisories/tag/ssrf.md?cursor=WyIyMDI2LTA5LTE2VDIwOjMzOjAwLjQwMjAwMFoiLCJDVkUtMjAyNi05MjgxNSJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=ssrf&cursor=WyIyMDI2LTA5LTIyVDE4OjU4OjEyLjg2MDAwMFoiLCJDVkUtMjAyNi04NDM5NSJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/ssrf/?cursor=WyIyMDI2LTA5LTIyVDE4OjU4OjEyLjg2MDAwMFoiLCJDVkUtMjAyNi04NDM5NSJd>. Everything for agents: <https://agentprime.io/llms.txt>.