# Server-side request forgery (SSRF).

The server made to send requests an attacker chooses. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [RAGAS has an Arbitrary File Read vulnerability](https://agentprime.io/advisories/GHSA-v2xr-wvrv-p969.md)
  `GHSA-v2xr-wvrv-p969`, `CVE-2025-45691`, `PYSEC-2026-3047` · PyPI `ragas`: affected `>=0.2.3, <0.3.0-rc1`, fixed in `0.3.0-rc1` · CVSS 7.5 High · Not analysed yet · Published 5 Mar 2026 · Tags: Path traversal, Denial of service, Server-side request forgery (SSRF)
- [Twenty: SSRF protection bypass via HTTP redirect following in secure HTTP client](https://agentprime.io/advisories/CVE-2026-27023.md)
  `CVE-2026-27023` · CVE record: twentyhq twenty · CVSS 5.0 Medium · Not analysed yet · Published 5 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress Ratatouille theme <= 1.2.6 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-28036.md)
  `CVE-2026-28036` · CVE record: SkatDesign Ratatouille · CVSS 6.4 Medium · Not analysed yet · Published 5 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [opennextjs-cloudflare has SSRF vulnerability via /cdn-cgi/ path normalization bypass](https://agentprime.io/advisories/GHSA-c7mq-gh6q-6q7c.md)
  `GHSA-c7mq-gh6q-6q7c`, `CVE-2025-6087`, `CVE-2026-3125`, `GHSA-rvpw-p7vw-wj3m` · npm `@opennextjs/cloudflare`: affected `<1.17.1`, fixed in `1.17.1` · CVSS 7.8 High · Not analysed yet · Published 5 Mar 2026 · Tags: Server-side request forgery (SSRF), CWE-706
- [Lemmy has unauthenticated SSRF via file_type query parameter injection in image endpoint](https://agentprime.io/advisories/GHSA-jvxv-2jjp-jxc3.md)
  `GHSA-jvxv-2jjp-jxc3`, `CVE-2026-29178` · crates.io `lemmy_routes`: affected `<0.19.16`, fixed in `0.19.16` · CVSS 7.7 High · Not analysed yet · Published 4 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [OpenClaw has incomplete IPv4 special-use SSRF blocking in web fetch guard](https://agentprime.io/advisories/GHSA-4rqq-w8v4-7p47.md)
  `GHSA-4rqq-w8v4-7p47`, `CVE-2026-32019` · npm `openclaw`: affected `<2026.2.22`, fixed in `2026.2.22` · CVSS 2.3 Low · Not analysed yet · Published 4 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [OpenClaw has SSRF guard bypass via IPv6 transition over ISATAP](https://agentprime.io/advisories/GHSA-8cp7-rp8r-mg77.md)
  `GHSA-8cp7-rp8r-mg77` · npm `openclaw`: affected `>=2026.1.20, <2026.2.19`, fixed in `2026.2.19` · CVSS 4.0, no score published · Not analysed yet · Published 4 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [PostX <= 5.0.8 - Authenticated (Administrator+) Server-Side Request Forgery via REST API Endpoints](https://agentprime.io/advisories/CVE-2026-1273.md)
  `CVE-2026-1273` · CVE record: wpxpo Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX · CVSS 7.2 High · Not analysed yet · Published 4 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [HomeBox affected by Blind SSRF](https://agentprime.io/advisories/CVE-2026-27600.md)
  `CVE-2026-27600` · CVE record: sysadminsmedia homebox · CVSS 5.0 Medium · Not analysed yet · Published 3 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [OpenClaw: Microsoft Teams media fetch paths bypass shared SSRF guard model](https://agentprime.io/advisories/GHSA-7qf6-h84j-8fq4.md)
  `GHSA-7qf6-h84j-8fq4` · npm `openclaw`: affected `<2026.2.26`, fixed in `2026.2.26` · CVSS 4.0, no score published · Not analysed yet · Published 3 Mar 2026 · Tags: Race condition, Server-side request forgery (SSRF)
- [OpenClaw has a IPv6 multicast SSRF classifier bypass](https://agentprime.io/advisories/GHSA-h97f-6pqj-q452.md)
  `GHSA-h97f-6pqj-q452` · npm `openclaw`: affected `<2026.2.25`, fixed in `2026.2.25` · CVSS 4.0, no score published · Not analysed yet · Published 3 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [OpenClaw's web tools strict URL guard could lose DNS pinning when env proxy is configured](https://agentprime.io/advisories/GHSA-8mvx-p2r9-r375.md)
  `GHSA-8mvx-p2r9-r375`, `CVE-2026-22181` · npm `openclaw`: affected `<2026.3.2`, fixed in `2026.3.2` · CVSS 6.1 Medium · Not analysed yet · Published 3 Mar 2026 · Tags: Race condition, Server-side request forgery (SSRF)
- [OpenClaw: Node camera URL payload host-binding bypass allowed gateway fetch pivots](https://agentprime.io/advisories/GHSA-2858-xg23-26fp.md)
  `GHSA-2858-xg23-26fp` · npm `openclaw`: affected `>=2026.2.13, <2026.3.2`, fixed in `2026.3.2` · CVSS 5.5 Medium · Not analysed yet · Published 3 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [OpenClaw's MSTeams attachment redirect handling could bypass configured media host allowlists](https://agentprime.io/advisories/GHSA-w76h-8m22-hpgh.md)
  `GHSA-w76h-8m22-hpgh`, `CVE-2026-32037` · npm `openclaw`: affected `<2026.2.22`, fixed in `2026.2.22` · CVSS 2.3 Low · Not analysed yet · Published 3 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [\`melange update-cache\` has unbounded HTTP download that can exhaust disk in CI](https://agentprime.io/advisories/GHSA-7rp8-r62p-q6wc.md)
  `GHSA-7rp8-r62p-q6wc`, `CVE-2026-29049`, `GO-2026-4588` · Go `chainguard.dev/melange`: affected `<0.43.4`, fixed in `0.43.4` · CVSS 4.3 Medium · Not analysed yet · Published 2 Mar 2026 · Tags: Denial of service, Server-side request forgery (SSRF)
- [OpenClaw has web_search citation redirect SSRF via private-network-allowing policy](https://agentprime.io/advisories/GHSA-g99v-8hwm-g76g.md)
  `GHSA-g99v-8hwm-g76g`, `CVE-2026-31989` · npm `openclaw`: affected `<2026.3.1`, fixed in `2026.3.1` · CVSS 5.3 Medium · Not analysed yet · Published 2 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [Idno Vulnerable to Unauthenticated SSRF via URL Unfurl Endpoint](https://agentprime.io/advisories/GHSA-fcrh-fqxh-6fx6.md)
  `GHSA-fcrh-fqxh-6fx6`, `CVE-2026-28508`, `PKSA-tjwq-xm4h-4hs1` · Packagist `idno/known`: affected `<1.6.4`, fixed in `1.6.4` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [ZimaOS is vulnerable to Server-Side Request Forgery (SSRF)](https://agentprime.io/advisories/CVE-2025-64427.md)
  `CVE-2025-64427` · CVE record: IceWhaleTech ZimaOS · CVSS 7.1 High · Not analysed yet · Published 2 Mar 2026 · Tags: Information disclosure, Server-side request forgery (SSRF)
- [Chamilo: Blind Server-Side Request Forgery (Unauth Blind SSRF)](https://agentprime.io/advisories/CVE-2025-50199.md)
  `CVE-2025-50199` · CVE record: chamilo chamilo-lms · CVSS 7.7 High · Not analysed yet · Published 2 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [Chamilo: Potential unauthenticated blind SSRF via openid function](https://agentprime.io/advisories/CVE-2024-50337.md)
  `CVE-2024-50337` · CVE record: chamilo chamilo-lms · CVSS 5.3 Medium · Not analysed yet · Published 2 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [Statamic Vulnerable to Server-Side Request Forgery via Glide](https://agentprime.io/advisories/GHSA-cwpp-325q-2cvp.md)
  `GHSA-cwpp-325q-2cvp`, `CVE-2026-28423`, `PKSA-n7ys-rxzm-bn18` · Packagist `statamic/cms`: affected `<5.73.11 || >=6.0.0-alpha.1, <6.4.0`, fixed in `5.73.11`, `6.4.0` · CVSS 6.8 Medium · Not analysed yet · Published 1 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [Gradio has SSRF via Malicious \`proxy_url\` Injection in \`gr.load()\` Config Processing](https://agentprime.io/advisories/GHSA-jmh7-g254-2cq9.md)
  `GHSA-jmh7-g254-2cq9`, `CVE-2026-28416`, `PYSEC-2026-66` · PyPI `gradio`: affected `<6.6.0`, fixed in `6.6.0` · CVSS 8.2 High · Not analysed yet · Published 1 Mar 2026 · Tags: Server-side request forgery (SSRF)
- [Featured Image from Content < 1.7 Authenticated SSRF via save_post](https://agentprime.io/advisories/CVE-2026-27759.md)
  `CVE-2026-27759` · CVE record: Dhrumil Kumbhani Featured Image from Content · CVSS 5.3 Medium · Not analysed yet · Published 27 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [Kiteworks Core is vulnerable to Server-Side Request Forgery (SSRF)](https://agentprime.io/advisories/CVE-2026-28271.md)
  `CVE-2026-28271` · CVE record: kiteworks security-advisories · CVSS 6.5 Medium · Not analysed yet · Published 27 Feb 2026 · Tags: Server-side request forgery (SSRF), CWE-350
- [XML External Entity (XXE) vulnerability resulting in Server-Side Request Forgery (SSRF)](https://agentprime.io/advisories/CVE-2026-2252.md)
  `CVE-2026-2252` · CVE record: Xerox FreeFlow Core · CVSS 7.5 High · Not analysed yet · Published 27 Feb 2026 · Tags: XML external entities (XXE), Server-side request forgery (SSRF)
- [itwanger paicoding Image Save Endpoint ImageRestController.java save server-side request forgery](https://agentprime.io/advisories/CVE-2026-3286.md)
  `CVE-2026-3286` · CVE record: itwanger paicoding · CVSS 5.3 Medium · Not analysed yet · Published 27 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [PSI Probe vulnerable to Server-Side Request Forgery](https://agentprime.io/advisories/GHSA-429m-9874-rx9w.md)
  `GHSA-429m-9874-rx9w`, `CVE-2026-3270` · Maven `com.github.psi-probe:psi-probe-core`: affected `<=5.3.0`, no fixed version yet · CVSS 5.3 Medium · Not analysed yet · Published 27 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [Gvfs: gvfs ftp backend: information disclosure via untrusted pasv responses](https://agentprime.io/advisories/CVE-2026-28295.md)
  `CVE-2026-28295` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 26 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [TerriaJS-Server has a domain validation bypass vulnerability in its proxy allowlist](https://agentprime.io/advisories/GHSA-w789-49fc-v8hr.md)
  `GHSA-w789-49fc-v8hr`, `CVE-2026-27818` · npm `terriajs-server`: affected `<4.0.3`, fixed in `4.0.3` · CVSS 8.7 High · Not analysed yet · Published 26 Feb 2026 · Tags: Server-side request forgery (SSRF), CWE-20
- [Mailpit is Vulnerable to Server-Side Request Forgery (SSRF) via Link Check API](https://agentprime.io/advisories/GHSA-mpf7-p9x7-96r3.md)
  `GHSA-mpf7-p9x7-96r3`, `CVE-2026-27808`, `GO-2026-4558` · Go `github.com/axllent/mailpit`: affected `<1.29.2`, fixed in `1.29.2` · CVSS 5.8 Medium · Not analysed yet · Published 26 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [LangChain Community: redirect chaining can lead to SSRF bypass via RecursiveUrlLoader](https://agentprime.io/advisories/GHSA-mphv-75cg-56wg.md)
  `GHSA-mphv-75cg-56wg`, `CVE-2026-27795` · npm `@langchain/community`: affected `<1.1.18`, fixed in `1.1.18` · CVSS 4.1 Medium · Not analysed yet · Published 25 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [esm.sh has SSRF localhost/private-network bypass in \`/http(s)\` module route](https://agentprime.io/advisories/GHSA-p2v6-84h2-5x4r.md)
  `GHSA-p2v6-84h2-5x4r`, `CVE-2026-27730`, `GO-2026-4554` · Go `github.com/esm-dev/esm.sh`: affected `<0.0.0-20250616164159-0593516c4cfa`, fixed in `0.0.0-20250616164159-0593516c4cfa` · CVSS 8.6 High · Not analysed yet · Published 25 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [Angular SSR is vulnerable to SSRF and Header Injection via request handling pipeline](https://agentprime.io/advisories/GHSA-x288-3778-4hhx.md)
  `GHSA-x288-3778-4hhx`, `CVE-2026-27739` · npm `@angular/ssr` and 2 more: affected `<19.2.21 || >=20.0.0-next.0, <20.3.17 || >=21.0.0-next.0, <21.1.5 || >=21.2.0-next.0, <21.2.0-rc.1`, fixed in `19.2.21`, `20.3.17`, `21.1.5`, `21.2.0-rc.1` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 25 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [changedetection.io is Vulnerable to SSRF via Watch URLs](https://agentprime.io/advisories/GHSA-3c45-4pj5-ch7m.md)
  `GHSA-3c45-4pj5-ch7m`, `CVE-2026-27696`, `PYSEC-2026-2126` · PyPI `changedetection-io`: affected `<0.54.1`, fixed in `0.54.1` · CVSS 8.6 High · Not analysed yet · Published 25 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [AVideo has Authenticated Server-Side Request Forgery via downloadURL in aVideoEncoder.json.php](https://agentprime.io/advisories/GHSA-h39h-7cvg-q7j6.md)
  `GHSA-h39h-7cvg-q7j6`, `CVE-2026-27732`, `PKSA-mpqq-rw7h-r6qr` · Packagist `wwbn/avideo`: affected `<22.0`, fixed in `22.0` · CVSS 8.6 High · Not analysed yet · Published 25 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [OpenKruise PodProbeMarker is Vulnerable to SSRF via Unrestricted Host Field](https://agentprime.io/advisories/GHSA-9fj4-3849-rv9g.md)
  `GHSA-9fj4-3849-rv9g`, `CVE-2026-24005`, `GO-2026-4549` · Go `github.com/openkruise/kruise`: affected `<1.7.5 || >=1.8.0, <1.8.3`, fixed in `1.7.5`, `1.8.3` · CVSS 0.0 None · Not analysed yet · Published 25 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [Astro is vulnerable to SSRF due to missing allowlist enforcement in remote image inferSize](https://agentprime.io/advisories/GHSA-cj9f-h6r6-4cx2.md)
  `GHSA-cj9f-h6r6-4cx2`, `CVE-2026-27829` · npm `@astrojs/node`: affected `>=9.0.0, <9.5.4`, fixed in `9.5.4` · CVSS 6.5 Medium · Not analysed yet · Published 25 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [feiyuchuixue sz-boot-parent download server-side request forgery](https://agentprime.io/advisories/CVE-2026-3189.md)
  `CVE-2026-3189` · CVE record: feiyuchuixue sz-boot-parent · CVSS 2.3 Low · Not analysed yet · Published 25 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [Plane Vulnerable to Full Read SSRF via Favicon Fetching in "Add Link" Feature](https://agentprime.io/advisories/CVE-2026-27706.md)
  `CVE-2026-27706` · CVE record: makeplane plane · CVSS 7.7 High · Not analysed yet · Published 25 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [esm.sh is vulnerable to full-response SSRF](https://agentprime.io/advisories/GHSA-3c9r-837r-qqm4.md)
  `GHSA-3c9r-837r-qqm4`, `CVE-2025-50180`, `GO-2026-4545` · Go `github.com/esm-dev/esm.sh`: affected `<0.0.0-20250616164159-0593516c4cfa`, fixed in `0.0.0-20250616164159-0593516c4cfa` · CVSS 8.7 High · Not analysed yet · Published 25 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [Responsive Lightbox & Gallery <= 2.7.1 - Authenticated (Author+) Server-Side Request Forgery via Remote Library Image Upload](https://agentprime.io/advisories/CVE-2026-2479.md)
  `CVE-2026-2479` · CVE record: dfactory Responsive Lightbox & Gallery · CVSS 5.0 Medium · Not analysed yet · Published 25 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [SourceCodester Website Link Extractor URL file_get_contents server-side request forgery](https://agentprime.io/advisories/CVE-2026-3163.md)
  `CVE-2026-3163` · CVE record: SourceCodester Website Link Extractor · CVSS 5.3 Medium · Not analysed yet · Published 25 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [Payload: Server-Side Request Forgery (SSRF) in External File URL Uploads](https://agentprime.io/advisories/GHSA-hhfx-5x8j-f5f6.md)
  `GHSA-hhfx-5x8j-f5f6`, `CVE-2026-27567` · npm `payload`: affected `<3.75.0`, fixed in `3.75.0` · CVSS 6.5 Medium · Not analysed yet · Published 24 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [Mastodon has SSRF via unvalidated FASP Provider base_url](https://agentprime.io/advisories/CVE-2026-27477.md)
  `CVE-2026-27477` · CVE record: mastodon mastodon · CVSS 4.6 Medium · Not analysed yet · Published 24 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [DocLink .NET Remoting Unauthenticated Arbitrary File Read/Write RCE](https://agentprime.io/advisories/CVE-2026-26222.md)
  `CVE-2026-26222` · CVE record: Beyond Limits Inc. Altec DocLink · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Feb 2026 · Tags: Insecure deserialization, Server-side request forgery (SSRF)
- [Craft CMS: Cloud Metadata SSRF Protection Bypass via IPv6 Resolution](https://agentprime.io/advisories/GHSA-v2gc-rm6g-wrw9.md)
  `GHSA-v2gc-rm6g-wrw9`, `CVE-2026-27129`, `PKSA-qgft-95tr-t5vt` · Packagist `craftcms/cms`: affected `>=3.5.0, <4.16.19 || >=5.0.0-RC1, <5.8.23`, fixed in `4.16.19`, `5.8.23` · CVSS 5.7 Medium · Not analysed yet · Published 24 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [DataLinkDC dinky Flink Proxy Controller FlinkProxyController.java proxyUba server-side request forgery](https://agentprime.io/advisories/CVE-2026-3052.md)
  `CVE-2026-3052` · CVE record: DataLinkDC dinky · CVSS 5.3 Medium · Not analysed yet · Published 24 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [Astro has Full-Read SSRF in error rendering via Host: header injection](https://agentprime.io/advisories/GHSA-qq67-mvv5-fw3g.md)
  `GHSA-qq67-mvv5-fw3g`, `CVE-2026-25545` · npm `@astrojs/node`: affected `<9.5.4`, fixed in `9.5.4` · CVSS 6.9 Medium · Not analysed yet · Published 23 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [erzhongxmu JEEWMS UEditor getRemoteImage.jsp server-side request forgery](https://agentprime.io/advisories/CVE-2026-3026.md)
  `CVE-2026-3026` · CVE record: erzhongxmu JEEWMS · CVSS 6.9 Medium · Not analysed yet · Published 23 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [Tiandy Video Surveillance System 视频监控平台 CLSBODownLoad.java downloadImage server-side request forgery](https://agentprime.io/advisories/CVE-2026-2985.md)
  `CVE-2026-2985` · CVE record: Tiandy Video Surveillance System 视频监控平台 · CVSS 5.3 Medium · Not analysed yet · Published 23 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [JeecgBoot uploadImgByHttp server-side request forgery](https://agentprime.io/advisories/CVE-2026-2945.md)
  `CVE-2026-2945` · CVE record: JeecgBoot · CVSS 5.3 Medium · Not analysed yet · Published 22 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [Wallos: SSRF via Redirect Bypass in Logo/Icon URL Fetch](https://agentprime.io/advisories/CVE-2026-27479.md)
  `CVE-2026-27479` · CVE record: ellite Wallos · CVSS 7.7 High · Not analysed yet · Published 21 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [OpenSift: SSRF risk in URL ingestion endpoint](https://agentprime.io/advisories/CVE-2026-27170.md)
  `CVE-2026-27170` · CVE record: OpenSift OpenSift · CVSS 7.1 High · Not analysed yet · Published 20 Feb 2026 · Tags: Server-side request forgery (SSRF), CWE-20
- [phpMoAdmin 1.1.5 Cross-Site Request Forgery via moadmin.php](https://agentprime.io/advisories/CVE-2019-25451.md)
  `CVE-2019-25451` · CVE record: Phpmoadmin phpMoAdmin · CVSS 5.3 Medium · Not analysed yet · Published 20 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [OpenClaw hardened cron webhook delivery against SSRF](https://agentprime.io/advisories/GHSA-w45g-5746-x9fp.md)
  `GHSA-w45g-5746-x9fp`, `CVE-2026-27488` · npm `openclaw`: affected `<2026.2.19`, fixed in `2026.2.19` · CVSS 6.9 Medium · Not analysed yet · Published 20 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress Oxygen theme <= 6.0.8 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2025-69299.md)
  `CVE-2025-69299` · CVE record: Laborator Oxygen · CVSS 7.2 High · Not analysed yet · Published 20 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [SSRF vulnerability have been discovered in OpenText™ XM Fax](https://agentprime.io/advisories/CVE-2025-8055.md)
  `CVE-2025-8055` · CVE record: OpenText™ XM Fax · CVSS 5.3 Medium · Not analysed yet · Published 19 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [SillyTavern has Server-Side Request Forgery (SSRF) via Asset Download Endpoint that Allows Reading Internal Services](https://agentprime.io/advisories/CVE-2026-26286.md)
  `CVE-2026-26286` · CVE record: SillyTavern SillyTavern · CVSS 7.1 High · Not analysed yet · Published 19 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [Hyland Alfresco Transformation Service Argument Injection RCE](https://agentprime.io/advisories/CVE-2026-26339.md)
  `CVE-2026-26339` · CVE record: Hyland Alfresco Transformation Service (Enterprise) and 1 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Feb 2026 · Tags: Server-side request forgery (SSRF)
- [Hyland Alfresco Transformation Service SSRF](https://agentprime.io/advisories/CVE-2026-26338.md)
  `CVE-2026-26338` · CVE record: Hyland Alfresco Transformation Service (Enterprise) and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 19 Feb 2026 · Tags: Server-side request forgery (SSRF)

Newest: <https://agentprime.io/advisories/tag/ssrf.md>
Older: <https://agentprime.io/advisories/tag/ssrf.md?cursor=WyIyMDI2LTAyLTE5VDE3OjAzOjIzLjUyMTAwMFoiLCJDVkUtMjAyNi0yNjMzOCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=ssrf&cursor=WyIyMDI2LTAzLTA1VDIxOjQzOjE1LjAwMDAwMFoiLCJHSFNBLWZweDgtNzNnZi03eDczIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/ssrf/?cursor=WyIyMDI2LTAzLTA1VDIxOjQzOjE1LjAwMDAwMFoiLCJHSFNBLWZweDgtNzNnZi03eDczIl0>. Everything for agents: <https://agentprime.io/llms.txt>.