# Server-side request forgery (SSRF).

The server made to send requests an attacker chooses. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.

## Records, newest first (an older page)

- [Server-side request forgery in the model download path in Amazon Web Services Multi Model Server](https://agentprime.io/advisories/CVE-2026-115813.md)
  `CVE-2026-115813` · CVE record: AWS multi-model-server · CVSS 6.9 Medium · Not analysed yet · Published 23 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Tandoor Recipes before 2.7.0 SSRF via Pestle Importer Image URL](https://agentprime.io/advisories/CVE-2026-115810.md)
  `CVE-2026-115810` · CVE record: TandoorRecipes recipes · CVSS 6.3 Medium · Not analysed yet · Published 23 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Unauthenticated SSRF and local file inclusion via DownloadTaskEndpoint WebSocket in Goobi viewer](https://agentprime.io/advisories/CVE-2026-46651.md)
  `CVE-2026-46651` · CVE record: intranda goobi-viewer-core · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 23 Oct 2026 · Tags: Authentication bypass, Information disclosure, Server-side request forgery (SSRF)
- [@pdfme/common 5.5.10 before 6.2.6 SSRF via isUrlSafeToFetch Bypass](https://agentprime.io/advisories/CVE-2026-115729.md)
  `CVE-2026-115729` · CVE record: pdfme common · CVSS 8.9 High · Not analysed yet · Published 23 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Event Schedule Vulnerable to SSRF: isUrlSafe() bypassable via bracketed IPv6 literals (parse_url keeps the brackets so the IPv6 guard never matches) and a v4-only-resolver fail-open; reaches internal…](https://agentprime.io/advisories/CVE-2026-55190.md)
  `CVE-2026-55190` · CVE record: eventschedule eventschedule · CVSS 6.5 Medium · Not analysed yet · Published 23 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Server-Side Request Forgery (SSRF) Leading to Internal Solr Data Disclosure](https://agentprime.io/advisories/CVE-2026-19678.md)
  `CVE-2026-19678` · CVE record: onPhase onPhase Forms · CVSS 8.7 High · Not analysed yet · Published 23 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Azure AI Foundry Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-108456.md)
  `CVE-2026-108456` · CVE record: Microsoft Azure AI Foundry · CVSS 7.7 High · Not analysed yet · Published 22 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Authenticated Server-Side Request Forgery leads to Remote Code Execution in AOS-8](https://agentprime.io/advisories/CVE-2026-79880.md)
  `CVE-2026-79880` · CVE record: Hewlett Packard Enterprise (HPE) ArubaOS (AOS) · CVSS 8.7 High · Not analysed yet · Published 22 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [crawlseo before 0.2.4 Server-Side Request Forgery via Crawler](https://agentprime.io/advisories/CVE-2026-115411.md)
  `CVE-2026-115411` · CVE record: crawlseo crawlseo · CVSS 5.3 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in Roundcube Webmail](https://agentprime.io/advisories/CVE-2026-114730.md)
  `CVE-2026-114730` · CVE record: Roundcube Webmail · CVSS 7.2 High · Not analysed yet · Published 22 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [WWBN AVideo before 29.4.0 Blind SSRF via getHeaderContentTypeFromURL Redirect](https://agentprime.io/advisories/CVE-2026-114634.md)
  `CVE-2026-114634` · CVE record: WWBN AVideo · CVSS 5.3 Medium · Not analysed yet · Published 22 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [SAML SSO - Service Provider - Moderately critical - Server Side Request Forgery - SA-CONTRIB-2026-151](https://agentprime.io/advisories/CVE-2026-87953.md)
  `CVE-2026-87953` · CVE record: Drupal SAML SSO - Service Provider · CVSS 3.3 Low · Not analysed yet · Published 22 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [OpenClaw: Browser CDP discovery could accept blocked WebSocket URLs](https://agentprime.io/advisories/GHSA-3x84-qq85-fj65.md)
  `GHSA-3x84-qq85-fj65`, `CVE-2026-62197` · npm `openclaw`: affected `<2026.6.6`, fixed in `2026.6.6` · CVSS 6.3 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Broken access control, Server-side request forgery (SSRF)
- [leomoon-studios wiki-go fetch-metadata Endpoint metadata_api.go server-side request forgery](https://agentprime.io/advisories/CVE-2026-114374.md)
  `CVE-2026-114374` · CVE record: leomoon-studios wiki-go · CVSS 5.3 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [HarnessRouter Targets Test Endpoint app.py server-side request forgery](https://agentprime.io/advisories/CVE-2026-114362.md)
  `CVE-2026-114362` · CVE record: HarnessRouter · CVSS 5.3 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [LocalAI v4.6.0 through v4.11.0 SSRF Guard Bypass via HTTP Redirects](https://agentprime.io/advisories/CVE-2026-114493.md)
  `CVE-2026-114493` · CVE record: LocalAI LocalAI · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Airbyte OneDrive Connector \_get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-92204.md)
  `CVE-2026-92204` · CVE record: Airbyte Airbyte · CVSS 7.7 High · Not analysed yet · Published 21 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Airbyte SharePoint Connector \_get_shared_drive_object Server-Side Request Forgery Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-92203.md)
  `CVE-2026-92203` · CVE record: Airbyte Airbyte · CVSS 7.7 High · Not analysed yet · Published 21 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [NoMachine nxhtd Server-Side Request Forgery Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-92210.md)
  `CVE-2026-92210` · CVE record: NoMachine NoMachine · CVSS 7.2 High · Not analysed yet · Published 21 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Lm-evaluation-harness: lm-evaluation-harness: ssrf via job-spec model.url with bearer credential forwarding](https://agentprime.io/advisories/CVE-2026-17557.md)
  `CVE-2026-17557` · CVE record: Red Hat Red Hat OpenShift AI (RHOAI) · CVSS 6.5 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Trigger.dev before 4.5.2 Blind SSRF via Alert-Channel Webhook URL](https://agentprime.io/advisories/CVE-2026-114080.md)
  `CVE-2026-114080` · CVE record: triggerdotdev trigger.dev · CVSS 5.3 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Trigger.dev before 4.5.10 Webhook SSRF Protection Bypass via 198.18.0.0/15 Range](https://agentprime.io/advisories/CVE-2026-114074.md)
  `CVE-2026-114074` · CVE record: triggerdotdev trigger.dev · CVSS 5.3 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [SvelteKit before 3.0.0 SSRF via Redirects in Server-Side Self-Fetch Fallbacks](https://agentprime.io/advisories/CVE-2026-114062.md)
  `CVE-2026-114062` · CVE record: sveltejs kit · CVSS 6.9 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Metasploit Framework HTTP Redirect Server-Side Request Forgery](https://agentprime.io/advisories/CVE-2026-109682.md)
  `CVE-2026-109682` · CVE record: Rapid7 Metasploit Framework · CVSS 4.7 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Metasploit Framework FTP PASV Response SSRF](https://agentprime.io/advisories/CVE-2026-109681.md)
  `CVE-2026-109681` · CVE record: Rapid7 Metasploit Framework · CVSS 4.7 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [a2aproject a2a-rs Push Notification push_notification_sender.rs HttpPushSender server-side request forgery](https://agentprime.io/advisories/CVE-2026-113704.md)
  `CVE-2026-113704` · CVE record: a2aproject a2a-rs · CVSS 6.9 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Bulwark Webmail: DNS-rebinding SSRF in public iCalendar fetch endpoint](https://agentprime.io/advisories/CVE-2026-113728.md)
  `CVE-2026-113728` · CVE record: bulwarkmail webmail · CVSS 7.5 High · Not analysed yet · Published 20 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [A2A Java SDK has Server-Side Request Forgery (SSRF) in push-notification delivery](https://agentprime.io/advisories/GHSA-q78c-5jjq-57g8.md)
  `GHSA-q78c-5jjq-57g8`, `CVE-2026-111761` · Maven `org.a2aproject.sdk:a2a-java-sdk-server-common`: affected `<1.3.0.Final`, fixed in `1.3.0.Final` · CVSS 5.8 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [ApostropheCMS: Host header controls server-side image fetch origin in @apostrophecms/ai-helper, enabling authenticated SSRF](https://agentprime.io/advisories/GHSA-527g-ff96-x6wj.md)
  `GHSA-527g-ff96-x6wj`, `CVE-2026-113671` · npm `@apostrophecms/ai-helper`: affected `>=1.0.0-beta.10, <1.0.0-beta.13`, fixed in `1.0.0-beta.13` · CVSS 4.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [SolarWinds Observability Self-Hosted Server-Side Request Forgery (SSRF)](https://agentprime.io/advisories/CVE-2026-28329.md)
  `CVE-2026-28329` · CVE record: SolarWinds SolarWinds Observability Self-Hosted · CVSS 6.4 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Kroxylicious-kms-provider-azure-key-vault-kms: streams for apache kafka kroxylicious: azure key vault ssrf exfiltrates bearer token via untrusted edek vaultname](https://agentprime.io/advisories/CVE-2026-105941.md)
  `CVE-2026-105941` · CVE record: Red Hat streams for Apache Kafka 3 · CVSS 8.1 High · Not analysed yet · Published 20 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [jwks_uri from the OIDC discovery document is fetched without checking its origin or scheme](https://agentprime.io/advisories/CVE-2026-107597.md)
  `CVE-2026-107597` · CVE record: Eclipse Foundation Eclipse CSI - PIA · CVSS 5.1 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [TYPO3-EXT-SA-2026-032: Server-Side Request Forgery in extension "Kitodo.Presentation" (dlf)](https://agentprime.io/advisories/PKSA-ggns-sv2d-stv8.md)
  `PKSA-ggns-sv2d-stv8`, `CVE-2026-112237` · Packagist `kitodo/presentation`: affected `<6.0.1 || >=7.0.0, <7.0.2`, fixed in `6.0.1`, `7.0.2` · CVSS 6.9 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [IBM ContextForge MCP Gateway is affected by server-side request forgery](https://agentprime.io/advisories/CVE-2026-8355.md)
  `CVE-2026-8355` · CVE record: IBM ContextForge MCP Gateway · CVSS 5.4 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [MISP html_to_markdown Module SSRF via Incomplete IP Range Blocking in is_safe_url()](https://agentprime.io/advisories/CVE-2026-112991.md)
  `CVE-2026-112991` · CVE record: MISP misp-modules · CVSS 6.3 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Server-side request forgery (SSRF), CWE-20
- [TiBillet Lespass APIv1 serializers.py get_img_from_url server-side request forgery](https://agentprime.io/advisories/CVE-2026-112358.md)
  `CVE-2026-112358` · CVE record: TiBillet Lespass · CVSS 2.1 Low · Not analysed yet · Published 19 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [smrealms smr Album Website AlbumEditProcessor.php isUrlReachable server-side request forgery](https://agentprime.io/advisories/CVE-2026-112299.md)
  `CVE-2026-112299` · CVE record: smrealms smr · CVSS 5.3 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [ptbsare anx-calibre-manager LLM Configuration llm.py LLMClient.chat server-side request forgery](https://agentprime.io/advisories/CVE-2026-112297.md)
  `CVE-2026-112297` · CVE record: ptbsare anx-calibre-manager · CVSS 5.3 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [agit8or1 clientst0r Property URL Importer property_url_importer.py \_fetch_html server-side request forgery](https://agentprime.io/advisories/CVE-2026-112254.md)
  `CVE-2026-112254` · CVE record: agit8or1 clientst0r · CVSS 5.3 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Crawl4AI 0.8.7 through 0.9.5 SSRF Bypass via SSLCertificate.from_url URL Userinfo](https://agentprime.io/advisories/CVE-2026-112363.md)
  `CVE-2026-112363` · CVE record: unclecode crawl4ai · CVSS 6.9 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [crewai-tools through 1.15.28 SSRF via SeleniumScrapingTool](https://agentprime.io/advisories/CVE-2026-112308.md)
  `CVE-2026-112308` · CVE record: crewAIInc crewai-tools · CVSS 8.3 High · Not analysed yet · Published 19 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Krayin CRM 2.2.5 before 2.2.7 SSRF Filter Bypass via DNS Rebinding](https://agentprime.io/advisories/CVE-2026-112288.md)
  `CVE-2026-112288` · CVE record: krayin laravel-crm · CVSS 2.1 Low · Not analysed yet · Published 19 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [SGLang through 0.5.22 SSRF via bootstrap_host and bootstrap_port on Decode Worker](https://agentprime.io/advisories/CVE-2026-112267.md)
  `CVE-2026-112267` · CVE record: sgl-project sglang · CVSS 6.9 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Sigma File Manager through 2.2.0 SSRF via Extension Download Commands](https://agentprime.io/advisories/CVE-2026-111936.md)
  `CVE-2026-111936` · CVE record: aleksey-hoffman Sigma File Manager · CVSS 5.3 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [KitchenOwl through 0.7.10 SSRF via Recipe Import scrapeKitchenOwl Fetch](https://agentprime.io/advisories/CVE-2026-111899.md)
  `CVE-2026-111899` · CVE record: TomBursch kitchenowl · CVSS 5.3 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Apache Camel: Camel-AS2 Server-Side Request Forgery and Credential Disclosure via Asynchronous MDN Delivery Address](https://agentprime.io/advisories/CVE-2026-80344.md)
  `CVE-2026-80344` · CVE record: Apache Software Foundation Apache Camel · CVSS 8.2 High · Not analysed yet · Published 19 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Apache Camel: Camel-Docling Unvalidated Message Body Input Source Enables Server-Side Request Forgery and Local File Disclosure](https://agentprime.io/advisories/CVE-2026-78163.md)
  `CVE-2026-78163` · CVE record: Apache Software Foundation Apache Camel · CVSS 5.9 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Path traversal, Information disclosure, Server-side request forgery (SSRF)
- [Apache Kylin: job-driver UI proxy SSRF](https://agentprime.io/advisories/CVE-2026-108764.md)
  `CVE-2026-108764` · CVE record: Apache Software Foundation Apache Kylin · CVSS 6.5 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [alexta69 MeTube Feed-metadata Thumbnail Fetch ytdl.py DownloadQueue.\_\_write_feed_metadata_sync server-side request forgery](https://agentprime.io/advisories/CVE-2026-112076.md)
  `CVE-2026-112076` · CVE record: alexta69 MeTube · CVSS 6.3 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [WP Data Access < 5.5.88 - Subscriber+ SSRF](https://agentprime.io/advisories/CVE-2026-106470.md)
  `CVE-2026-106470` · CVE record: Unknown WP Data Access · CVSS 5.0 Medium · Not analysed yet · Published 17 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Tandoor Recipes: Blind SSRF via AI provider URL (api_base)](https://agentprime.io/advisories/CVE-2026-59970.md)
  `CVE-2026-59970` · CVE record: TandoorRecipes recipes · CVSS 7.7 High · Not analysed yet · Published 16 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [fish-island-backend through commit 7c61b78 SSRF via /api/web/parse](https://agentprime.io/advisories/CVE-2026-111720.md)
  `CVE-2026-111720` · CVE record: lhccong fish-island-backend · CVSS 6.9 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Chaskiq through 2.0.3 SSRF via createUrlUpload GraphQL Mutation](https://agentprime.io/advisories/CVE-2026-111663.md)
  `CVE-2026-111663` · CVE record: chaskiq chaskiq · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Chaskiq through 2.0.3 Unauthenticated SSRF via /oembed Endpoint](https://agentprime.io/advisories/CVE-2026-111662.md)
  `CVE-2026-111662` · CVE record: chaskiq chaskiq · CVSS 6.9 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [SparkyFitness: SSRF via unvalidated custom_url in AI service settings](https://agentprime.io/advisories/CVE-2026-102923.md)
  `CVE-2026-102923` · CVE record: CodeWithCJ SparkyFitness · CVSS 5.4 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Server-side request forgery in Devolutions Server](https://agentprime.io/advisories/CVE-2026-110805.md)
  `CVE-2026-110805` · CVE record: Devolutions Server · CVSS 2.6 Low · Not analysed yet · Published 16 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Server-Side Request Forgery in Wegow PDF export](https://agentprime.io/advisories/CVE-2026-101300.md)
  `CVE-2026-101300` · CVE record: Wegow Technologies Wegow · CVSS 7.1 High · Not analysed yet · Published 16 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [bitcoinj Payment Request PaymentSession.java url.openConnection server-side request forgery](https://agentprime.io/advisories/CVE-2026-111210.md)
  `CVE-2026-111210` · CVE record: bitcoinj · CVSS 6.9 Medium · Not analysed yet · Published 16 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [RedAmon through 7.0.1 Unauthenticated SSRF via /tradecraft/verify Endpoint](https://agentprime.io/advisories/CVE-2026-111323.md)
  `CVE-2026-111323` · CVE record: samugit83 RedAmon · CVSS 6.9 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [TaskingAI through 0.3.0 SSRF via OpenAPI servers\[0\].url in Actions](https://agentprime.io/advisories/CVE-2026-111321.md)
  `CVE-2026-111321` · CVE record: TaskingAI TaskingAI · CVSS 5.3 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Server-side request forgery (SSRF)

Newest: <https://agentprime.io/advisories/tag/ssrf.md>
Older: <https://agentprime.io/advisories/tag/ssrf.md?cursor=WyIyMDI2LTEwLTE1VDIxOjQzOjMwLjI1NDAwMFoiLCJDVkUtMjAyNi0xMTEzMjEiXQ>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=ssrf&cursor=WyIyMDI2LTEwLTIzVDIyOjA3OjI2LjAwMDAwMFoiLCJHSFNBLTJ3cXAtcTNjNi1jY2o1Il0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/ssrf/?cursor=WyIyMDI2LTEwLTIzVDIyOjA3OjI2LjAwMDAwMFoiLCJHSFNBLTJ3cXAtcTNjNi1jY2o1Il0>. Everything for agents: <https://agentprime.io/llms.txt>.