# Server-side request forgery (SSRF).

The server made to send requests an attacker chooses. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [SPIP before 4.4.18 SSRF via HTTP Redirects in recuperer_url](https://agentprime.io/advisories/CVE-2026-109378.md)
  `CVE-2026-109378` · CVE record: SPIP SPIP · CVSS 5.3 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Quay: quay: webhook notification ssrf -- hostname-string blocklist trivially bypassable](https://agentprime.io/advisories/CVE-2026-85471.md)
  `CVE-2026-85471` · CVE record: Red Hat mirror registry for Red Hat OpenShift and 2 more · CVSS 6.4 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Openshift/console: openshift/console: authenticated ssrf via helm chart url fetch](https://agentprime.io/advisories/CVE-2026-75888.md)
  `CVE-2026-75888` · CVE record: Red Hat Red Hat OpenShift Container Platform 4.12 and 4 more · CVSS 7.7 High · Not analysed yet · Published 12 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery and hard-coded key in Progress MarkLogic Server OpsDirector](https://agentprime.io/advisories/CVE-2026-85963.md)
  `CVE-2026-85963` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 7.5 High · Not analysed yet · Published 12 Oct 2026 · Tags: Hard-coded credentials, Server-side request forgery (SSRF)
- [Crawl4AI before 0.9.4 Blind SSRF via RobotsParser.can_fetch robots.txt Fetch](https://agentprime.io/advisories/CVE-2026-109239.md)
  `CVE-2026-109239` · CVE record: unclecode crawl4ai · CVSS 6.9 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Crawl4AI 0.7.0 before 0.9.4 SSRF via link_preview_config URL Seeder](https://agentprime.io/advisories/CVE-2026-109238.md)
  `CVE-2026-109238` · CVE record: unclecode crawl4ai · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 12 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in Progress MarkLogic Server Linux cloud deployments](https://agentprime.io/advisories/CVE-2026-85952.md)
  `CVE-2026-85952` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 8.5 High · Not analysed yet · Published 12 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in Progress MarkLogic Server Azure deployments](https://agentprime.io/advisories/CVE-2026-85951.md)
  `CVE-2026-85951` · CVE record: Progress Software Corporation MarkLogic Server · CVSS 8.5 High · Not analysed yet · Published 12 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [LogicalDOC Community Edition through 9.3 SSRF via XMLConverter xml-stylesheet href](https://agentprime.io/advisories/CVE-2026-109200.md)
  `CVE-2026-109200` · CVE record: LogicalDOC LogicalDOC Community Edition · CVSS 5.3 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Untrusted request routing and forged acknowledgements permit copy-workflow manipulation in Progress ShareFile Storage Zones Controller](https://agentprime.io/advisories/CVE-2026-93694.md)
  `CVE-2026-93694` · CVE record: Progress ShareFile Storage Zones Controller · CVSS 4.0 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Hard-coded credentials, Race condition, Server-side request forgery (SSRF)
- [Unauthenticated queue manipulation through connector SSRF and response injection in Progress ShareFile Storage Zones Controller](https://agentprime.io/advisories/CVE-2026-93693.md)
  `CVE-2026-93693` · CVE record: Progress ShareFile Storage Zones Controller · CVSS 6.5 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Authentication bypass, Server-side request forgery (SSRF), CWE-20, CWE-116
- [Ollama Pull API name.go IsValid server-side request forgery](https://agentprime.io/advisories/CVE-2026-108836.md)
  `CVE-2026-108836` · CVE record: Ollama · CVSS 6.9 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [houtini-ai voice-analyser-mcp collect_corpus crawler.ts fetch server-side request forgery](https://agentprime.io/advisories/CVE-2026-108787.md)
  `CVE-2026-108787` · CVE record: houtini-ai voice-analyser-mcp · CVSS 5.3 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [houtini-ai seo-crawler-mcp Crawler CrawlOrchestrator.ts run_seo_audit server-side request forgery](https://agentprime.io/advisories/CVE-2026-108786.md)
  `CVE-2026-108786` · CVE record: houtini-ai seo-crawler-mcp · CVSS 5.3 Medium · Not analysed yet · Published 12 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Appwrite Browser Screenshot Service Get.php PublicHostname server-side request forgery](https://agentprime.io/advisories/CVE-2026-108770.md)
  `CVE-2026-108770` · CVE record: Appwrite · CVSS 6.9 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Company Research Agent through 2.2.0 SSRF via /generate-pdf ReportLab Markup](https://agentprime.io/advisories/CVE-2026-108850.md)
  `CVE-2026-108850` · CVE record: guy-hartstein company-research-agent · CVSS 6.9 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Miniflux 2.3.0 through 2.3.3 SSRF via Per-Feed Proxy URL](https://agentprime.io/advisories/CVE-2026-108735.md)
  `CVE-2026-108735` · CVE record: miniflux miniflux · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [LLMGateway through 1.20.0 Blind SSRF via Video-Generation callback_url](https://agentprime.io/advisories/CVE-2026-108719.md)
  `CVE-2026-108719` · CVE record: theopenco LLMGateway · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Casdoor Proxy Validation cas.go CasP3ProxyValidate server-side request forgery](https://agentprime.io/advisories/CVE-2026-108572.md)
  `CVE-2026-108572` · CVE record: Casdoor · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [021is elvix-sdk MCP Request index.ts server-side request forgery](https://agentprime.io/advisories/CVE-2026-108542.md)
  `CVE-2026-108542` · CVE record: 021is elvix-sdk · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Studio-Saelix Sencho git-sources Browse API Endpoint outboundTarget.ts server-side request forgery](https://agentprime.io/advisories/CVE-2026-108523.md)
  `CVE-2026-108523` · CVE record: Studio-Saelix Sencho · CVSS 5.3 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Studio-Saelix Sencho Add Remote Node API Endpoint validation.ts isValidRemoteUrl server-side request forgery](https://agentprime.io/advisories/CVE-2026-108521.md)
  `CVE-2026-108521` · CVE record: Studio-Saelix Sencho · CVSS 5.1 Medium · Not analysed yet · Published 11 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Helicone through v2025.08.21-1 SSRF via Jawn Webhook Sender DNS Resolution](https://agentprime.io/advisories/CVE-2026-108602.md)
  `CVE-2026-108602` · CVE record: Helicone helicone · CVSS 5.3 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress Builderius plugin <= 1.4-beta - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-27350.md)
  `CVE-2026-27350` · CVE record: Builderius.io Builderius · CVSS 7.2 High · Not analysed yet · Published 10 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [WordPress StreamCast plugin <= 2.4.5 - Server Side Request Forgery (SSRF) vulnerability](https://agentprime.io/advisories/CVE-2026-62030.md)
  `CVE-2026-62030` · CVE record: bPlugins StreamCast · CVSS 7.2 High · Not analysed yet · Published 10 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Mealie 3.26.0 through 3.28.0 SSRF via OIDC Picture Claim Avatar Fetch](https://agentprime.io/advisories/CVE-2026-108594.md)
  `CVE-2026-108594` · CVE record: mealie-recipes mealie · CVSS 2.3 Low · Not analysed yet · Published 10 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [zotero-mcp 0.10.0 through 0.14.1 SSRF via zotero_add_by_url Tool](https://agentprime.io/advisories/CVE-2026-108583.md)
  `CVE-2026-108583` · CVE record: 54yyyu zotero-mcp · CVSS 2.3 Low · Not analysed yet · Published 10 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [PDFMathTranslate through 1.9.11 SSRF via Gradio Web GUI Link Input](https://agentprime.io/advisories/CVE-2026-108554.md)
  `CVE-2026-108554` · CVE record: PDFMathTranslate PDFMathTranslate · CVSS 6.9 Medium · Not analysed yet · Published 10 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Kortix Suna 0.10.7 before 0.13.52 SSRF Guard Bypass via IPv6 6to4 Addresses](https://agentprime.io/advisories/CVE-2026-108115.md)
  `CVE-2026-108115` · CVE record: kortix-ai suna · CVSS 2.3 Low · Not analysed yet · Published 10 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [pyLoad WindowsPhoneNotify addon: non-admin SETTINGS user triggers SSRF via unguarded http.client notification host](https://agentprime.io/advisories/GHSA-p3pr-8f3m-4qp8.md)
  `GHSA-p3pr-8f3m-4qp8` · PyPI `pyload-ng`: affected `<=0.5.0b3.dev101`, no fixed version yet · CVSS 6.4 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Grid Protection Alliance openPDC and openHistorian Server-Side Request Forgery (SSRF)](https://agentprime.io/advisories/CVE-2026-101022.md)
  `CVE-2026-101022` · CVE record: Grid Protection Alliance openPDC and 2 more · CVSS 5.3 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in Dell Secure Connect Gateway (SCG) Policy Manager](https://agentprime.io/advisories/CVE-2026-78027.md)
  `CVE-2026-78027` · CVE record: Dell Secure Connect Gateway (SCG) Policy Manager · CVSS 5.8 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in Dell Secure Connect Gateway (SCG) Policy Manager](https://agentprime.io/advisories/CVE-2026-78024.md)
  `CVE-2026-78024` · CVE record: Dell Secure Connect Gateway (SCG) Policy Manager · CVSS 7.7 High · Not analysed yet · Published 9 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Kirki < 6.3.2 - Editor+ Blind SSRF via Remote Template URL](https://agentprime.io/advisories/CVE-2026-84224.md)
  `CVE-2026-84224` · CVE record: Unknown Kirki · CVSS 4.1 Medium · Not analysed yet · Published 9 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Azure SRE Agent Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-69435.md)
  `CVE-2026-69435` · CVE record: Microsoft Azure SRE Agent · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Indico: Incomplete Server-Side Request Forgery (SSRF) check](https://agentprime.io/advisories/GHSA-2v95-h47v-g4x9.md)
  `GHSA-2v95-h47v-g4x9`, `CVE-2026-107394`, `PYSEC-2026-4225` · PyPI `indico`: affected `<3.3.13`, fixed in `3.3.13` · CVSS 6.8 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [PraisonAI: Jobs API is unauthenticated by default and allows attacker-controlled webhook SSRF](https://agentprime.io/advisories/GHSA-4w49-gwv8-fpjg.md)
  `GHSA-4w49-gwv8-fpjg`, `CVE-2026-60091`, `PYSEC-2026-4249` · PyPI `praisonai`: affected `<4.6.78`, fixed in `4.6.78` · CVSS 6.9 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Information disclosure, Authentication bypass, Race condition, Server-side request forgery (SSRF)
- [Dromara Skyeye Unauthenticated SSRF and File Overwrite via editUploadOfficeFileById](https://agentprime.io/advisories/CVE-2026-107781.md)
  `CVE-2026-107781` · CVE record: dromara skyeye · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [FFmpeg before 7.1.4 and 8.0.2 SSRF via RTSP Redirect Handling](https://agentprime.io/advisories/CVE-2026-107698.md)
  `CVE-2026-107698` · CVE record: FFmpeg FFmpeg · CVSS 5.3 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Server-Side Request Forgery in Malcolm](https://agentprime.io/advisories/CVE-2026-107362.md)
  `CVE-2026-107362` · CVE record: CISA Malcolm · CVSS 7.1 High · Not analysed yet · Published 8 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifiers](https://agentprime.io/advisories/GHSA-vmxc-h2x2-jmf3.md)
  `GHSA-vmxc-h2x2-jmf3`, `CVE-2026-107289`, `PYSEC-2026-4282`, `PYSEC-2026-4291` · PyPI `pydantic-ai` and 1 more: affected `>=1.56.0, <1.107.6 || >=2.0.0b1, <2.44.0`, fixed in `1.107.6`, `2.44.0` · CVSS 6.8 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Server-side request forgery (SSRF), CWE-1289
- [PraisonAI: DNS rebinding bypass in \`web_crawl\` SSRF protection allows internal response disclosure](https://agentprime.io/advisories/GHSA-qg25-6gc4-48mg.md)
  `GHSA-qg25-6gc4-48mg`, `CVE-2026-61430`, `PYSEC-2026-4272` · PyPI `praisonaiagents`: affected `<1.6.78`, fixed in `1.6.78` · CVSS 8.4 High · Not analysed yet · Published 8 Oct 2026 · Tags: Information disclosure, Race condition, Server-side request forgery (SSRF)
- [Pydantic AI: web_fetch_tool blocked_domains bypass via a hostname the resolver normalizes differently](https://agentprime.io/advisories/CVE-2026-107288.md)
  `CVE-2026-107288` · CVE record: pydantic pydantic-ai and 1 more · CVSS 3.7 Low · Not analysed yet · Published 8 Oct 2026 · Tags: Server-side request forgery (SSRF), CWE-1289
- [IBM DataPower Gateway affected by server-side request forgery](https://agentprime.io/advisories/CVE-2026-14521.md)
  `CVE-2026-14521` · CVE record: IBM DataPower Gateway 10.6CD and 3 more · CVSS 4.9 Medium · Not analysed yet · Published 8 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in linuxserver Heimdall](https://agentprime.io/advisories/CVE-2026-107449.md)
  `CVE-2026-107449` · CVE record: linuxserver Heimdall · CVSS 3.4 Low · Not analysed yet · Published 8 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Server-Side Request Forgery (SSRF) through Custom API Tools in Splunk MCP Server](https://agentprime.io/advisories/CVE-2026-76286.md)
  `CVE-2026-76286` · CVE record: Splunk Splunk MCP Server · CVSS 5.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Server-Side Request Forgery (SSRF) through the REST API in Splunk App for Splunk Observability Cloud](https://agentprime.io/advisories/CVE-2026-76274.md)
  `CVE-2026-76274` · CVE record: Splunk Splunk Enterprise · CVSS 6.5 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Docling has SSRF guard bypass in remote resource fetching (DNS rebinding / multi-record resolution; no IP validation in HTML render mode)](https://agentprime.io/advisories/GHSA-pc36-qwjq-x68c.md)
  `GHSA-pc36-qwjq-x68c`, `CVE-2026-105743`, `PYSEC-2026-4190`, `PYSEC-2026-4214` · PyPI `docling` and 1 more: affected `>=2.91.0, <2.132.0`, fixed in `2.132.0` · CVSS 4.0 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Race condition, Server-side request forgery (SSRF)
- [Ghost: Server-Side Request Forgery in Bookmark Fetching](https://agentprime.io/advisories/GHSA-322m-ff4g-9vx9.md)
  `GHSA-322m-ff4g-9vx9`, `BIT-ghost-2026-105647`, `CVE-2026-105647` · npm `ghost`: affected `>=6.54.1, <6.65.0`, fixed in `6.65.0` · CVSS 4.0 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Race condition, Server-side request forgery (SSRF)
- [Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses](https://agentprime.io/advisories/GHSA-r7f2-6fj8-6fg2.md)
  `GHSA-r7f2-6fj8-6fg2`, `BIT-ghost-2026-105648`, `CVE-2026-105648` · npm `ghost`: affected `>=6.0.9, <6.65.0`, fixed in `6.65.0` · CVSS 4.0 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Server-side request forgery (SSRF), CWE-184
- [Next.js has Server-Side Request Forgery in Image Optimization](https://agentprime.io/advisories/GHSA-cjq9-62q9-8jv4.md)
  `GHSA-cjq9-62q9-8jv4`, `CVE-2026-94483` · npm `next`: affected `>=16.0.0, <16.3.8`, fixed in `16.3.8` · CVSS 8.3 High · Not analysed yet · Published 7 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Backstage: Improper validation of MkDocs plugin configuration in TechDocs](https://agentprime.io/advisories/GHSA-q38j-6vcm-2f5m.md)
  `GHSA-q38j-6vcm-2f5m`, `CVE-2026-106455` · npm `@backstage/plugin-techdocs-node`: affected `>=0.11.12, <1.14.7 || >=1.15.0, <1.15.5`, fixed in `1.14.7`, `1.15.5` · CVSS 7.7 High · Not analysed yet · Published 7 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Backstage: Improper input validation in Sentry scaffolder actions](https://agentprime.io/advisories/GHSA-g734-fhp4-7mfp.md)
  `GHSA-g734-fhp4-7mfp`, `CVE-2026-106459` · npm `@backstage/plugin-scaffolder-backend-module-sentry`: affected `>=0.3.0, <0.3.8`, fixed in `0.3.8` · CVSS 8.5 High · Not analysed yet · Published 7 Oct 2026 · Tags: Information disclosure, Server-side request forgery (SSRF)
- [PraisonAI: Crawl4AI/Chromium backend is also affected by the \`web_crawl\` SSRF validation bypass](https://agentprime.io/advisories/GHSA-6g59-gm2v-qhvq.md)
  `GHSA-6g59-gm2v-qhvq`, `CVE-2026-61429`, `PYSEC-2026-4269` · PyPI `praisonaiagents`: affected `<1.6.78`, fixed in `1.6.78` · CVSS 8.4 High · Not analysed yet · Published 7 Oct 2026 · Tags: Information disclosure, Race condition, Server-side request forgery (SSRF)
- [Backstage: Improper URL validation in catalog entity placeholder resolution](https://agentprime.io/advisories/GHSA-qgvj-qcf8-xq73.md)
  `GHSA-qgvj-qcf8-xq73`, `CVE-2026-106498` · npm `@backstage/plugin-catalog-backend`: affected `<3.9.1`, fixed in `3.9.1` · CVSS 7.7 High · Not analysed yet · Published 7 Oct 2026 · Tags: Broken access control, Server-side request forgery (SSRF)
- [Backstage has improper input validation in TechDocs Markdown extension configuration](https://agentprime.io/advisories/GHSA-f7v3-xhm6-w245.md)
  `GHSA-f7v3-xhm6-w245`, `CVE-2026-106557` · npm `@backstage/plugin-techdocs-node`: affected `<1.15.4`, fixed in `1.15.4` · CVSS 7.7 High · Not analysed yet · Published 7 Oct 2026 · Tags: Path traversal, Server-side request forgery (SSRF)
- [Ghost: Server-Side Request Forgery in Webhook Trigger](https://agentprime.io/advisories/GHSA-354h-gmhv-mr9c.md)
  `GHSA-354h-gmhv-mr9c`, `BIT-ghost-2026-103287`, `BIT-ghost-2026-105682`, `CVE-2026-103287`, `CVE-2026-105682` · npm `ghost`: affected `>=1.18.0, <6.27.0`, fixed in `6.27.0` · CVSS 5.1 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Cisco Finesse Server-Side Request Forgery Vulnerability](https://agentprime.io/advisories/CVE-2026-20362.md)
  `CVE-2026-20362` · CVE record: Cisco Cisco Finesse · CVSS 7.2 High · Not analysed yet · Published 7 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Gophish 0.11.0 through 0.12.1 SSRF via POST /api/import/site](https://agentprime.io/advisories/CVE-2026-107273.md)
  `CVE-2026-107273` · CVE record: gophish gophish · CVSS 5.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in SonicWall SMA1000](https://agentprime.io/advisories/CVE-2026-102255.md)
  `CVE-2026-102255` · CVE record: SonicWall SMA1000 · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Oct 2026 · Tags: Server-side request forgery (SSRF), CWE-441

Newest: <https://agentprime.io/advisories/tag/ssrf.md>
Older: <https://agentprime.io/advisories/tag/ssrf.md?cursor=WyIyMDI2LTEwLTA3VDEzOjA3OjEzLjM4NDAwMFoiLCJDVkUtMjAyNi0xMDIyNTUiXQ>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=ssrf&cursor=WyIyMDI2LTEwLTEyVDIyOjIxOjU1LjgwNDAwMFoiLCJDVkUtMjAyNi0xMDk2MDMiXQ>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/ssrf/?cursor=WyIyMDI2LTEwLTEyVDIyOjIxOjU1LjgwNDAwMFoiLCJDVkUtMjAyNi0xMDk2MDMiXQ>. Everything for agents: <https://agentprime.io/llms.txt>.