Advisories · Weakness
Server-side request forgery (SSRF).
The server made to send requests an attacker chooses. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 7.2 High
Spring AI MCP Security: Unvalidated URL Fetching (SSRF)
- Server-side request forgery (SSRF)
<0.1.9 · fixed in 0.1.9
GHSA-qjp4-4jvr-xqg3 · CVE-2026-45609 - CVSS 3.5 Low
Mattermost doesn't validate the Host header when constructing response URLs for custom slash command
- Server-side request forgery (SSRF)
<5.3.2-0.20260325160634-e738016c5920 · fixed in 5.3.2-0.20260325160634-e738016c5920
GHSA-vqp5-2mrp-qqxg · CVE-2026-6333 - CVSS 6.9 Medium
vercel ai provider-utils download-blob.ts validateDownloadUrl server-side request forgery
- vercel ai
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
CoreWorxLab CAAL test-hass Endpoint webhooks.py server-side request forgery
- CoreWorxLab CAAL
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
CouchCMS 2.2.1 Server-Side Request Forgery via SVG upload
- CouchCMS
- Server-side request forgery (SSRF)
- CVSS 6.5 Medium
AVideo CVE-2026-43884 incomplete fix - six (or more) `isSSRFSafeURL()` call sites still discard the `$resolvedIP` out-param at master HEAD post-`603e7bf`
- Race condition
- Server-side request forgery (SSRF)
<=29.0 · no fixed version yet
GHSA-c3ch-22rq-xfwr · CVE-2026-45619 - CVSS 7.7 High
Budibase: SSRF Bypass via HTTP Redirect in REST Datasource Integration
- Server-side request forgery (SSRF)
<3.38.1 · fixed in 3.38.1
GHSA-fgqv-jh4g-pvg2 · CVE-2026-45715 - CVSS 7.7 High
Budibase: SSRF in AI Extract File Automation Step via Missing IP Blacklist Validation
- Server-side request forgery (SSRF)
<3.34.8 · fixed in 3.34.8
GHSA-rpj4-7x2v-wjrf · CVE-2026-45548 - CVSS 4.7 Medium
@utcp/http: SSRF via attacker-controlled OpenAPI servers[0].url in HTTP communication protocol
- Server-side request forgery (SSRF)
<1.1.2 · fixed in 1.1.2
GHSA-r8j5-8747-88cm · CVE-2026-45366 - CVSS 7.4 High
DeepSeek TUI has SSRF IPV6 bypass
- Server-side request forgery (SSRF)
<0.8.26 · fixed in 0.8.26
GHSA-88gh-2526-gfrr · CVE-2026-45373 - CVSS 7.4 High
DeepSeek TUI has SSRF via HTTP Redirect Bypass in fetch_url Tool
- Server-side request forgery (SSRF)
<0.8.22 · fixed in 0.8.22
GHSA-96ff-gc8g-wpvg · CVE-2026-45310 - CVSS 8.5 High
Open WebUI has a SSRF Bypass via HTTP Redirect Following in Web-Fetch and Image-Load Endpoints (not addressed by CVE-2025-65958)
- Server-side request forgery (SSRF)
<0.9.5 · fixed in 0.9.5
GHSA-rh5x-h6pp-cjj6 · CVE-2026-45401 - CVSS 8.5 High
Open WebUI has a Server-Side Request Forgery (SSRF) bypass in `validate_url`
- Server-side request forgery (SSRF)
<0.9.5 · fixed in 0.9.5
GHSA-8w7q-q5jp-jvgx · CVE-2026-45400 - CVSS 4.3 Medium
Open WebUI vulnerable to blind server side request forgery (SSRF) via the PDF generate function
- Server-side request forgery (SSRF)
<0.5.11 · fixed in 0.5.11
GHSA-f776-fp4w-266c · CVE-2026-45347 - CVSS 7.7 High
Open WebUI Vulnerable to SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py)
- Server-side request forgery (SSRF)
<0.9.0 · fixed in 0.9.0
GHSA-24c9-2m8q-qhmh · CVE-2026-45338 - CVSS 8.5 High
Open WebUI has a full SSRF Vulnerability in the RAG Web Search Feature
- Server-side request forgery (SSRF)
<0.9.0 · fixed in 0.9.0
GHSA-4v7r-f4w8-8972 · CVE-2026-45331 - CVSS 7.6 High
Apostrophe has authenticated SSRF in rich-text widget import via @apostrophecms/area/validate-widget
- Server-side request forgery (SSRF)
<=4.29.0 · no fixed version yet
GHSA-pr28-mf3q-qpg6 · CVE-2026-45012 - CVSS 4.0, no score published
Karakeep SDK has SSRF via metascraper-logo-favicon that bypasses validateUrl protections
- Server-side request forgery (SSRF)
<0.32.0 · fixed in 0.32.0
GHSA-7rx4-c5vx-g8w3 - CVSS 2.3 Low
Nextcloud News: Authenticated blind SSRF via feed URL
- nextcloud news
- Server-side request forgery (SSRF)
- CVSS 7.5 High
InfusedWoo Pro <= 5.1.2 - Unauthenticated Arbitrary File Read via 'url' Parameter
- Infused Addons InfusedWoo Pro
- Server-side request forgery (SSRF)
- CVSS 3.5 Low
Server-Side Request Forgery (SSRF) in GitLab
- GitLab
- Server-side request forgery (SSRF)
- CVSS 5.0 Medium
ERPNext: Possible SSRF by any authenticated user
- frappe erpnext
- Server-side request forgery (SSRF)
- CVSS 5.9 Medium
FTP PASV SSRF, ftpcp() does not use actual peer address, trusts server-supplied PASV host address
- Python Software Foundation CPython
- Server-side request forgery (SSRF)
- CVSS 4.8 Medium
PAN-OS: Server-Side Request Forgery (SSRF) in IKEv2 Certificate URL Fetching
- Palo Alto Networks Cloud NGFW
- Palo Alto Networks PAN-OS
- Server-side request forgery (SSRF)
- CVSS 8.5 High
Nautobot: Webhook definitions could be used for server-side request forgery (SSRF)
- Server-side request forgery (SSRF)
<2.4.33 || >=3.0.0a2, <3.1.2 · fixed in 2.4.33, 3.1.2
GHSA-c35q-vxrp-ph26 · CVE-2026-44797 - CVSS 6.9 Medium
SillyTavern has a SSRF vulnerability in the CORS proxy middleware
- Server-side request forgery (SSRF)
<1.18.0 · fixed in 1.18.0
GHSA-ccfq-2454-f5xw · CVE-2026-44652 - CVSS 5.0 Medium
mosparo: Rule package source URL stored SSRF enables internal HTTP probing
- mosparo
- Server-side request forgery (SSRF)
- CVSS 7.4 High
Adobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)
- Adobe Commerce
- Adobe Commerce B2B
- Server-side request forgery (SSRF)
- CVSS 7.7 High
Xibo: Authenticated Server-Side Request Forgery (SSRF) in Library Upload via URL functionality
- xibosignage xibo-cms
- Server-side request forgery (SSRF)
- CVSS 8.2 High
JunoClaw: SSRF in WAVS computeDataVerify allows cloud-metadata and internal-service access
- Dragonmonk111 junoclaw
- Server-side request forgery (SSRF)
- CVSS 7.1 High
Server-Side Request Forgery in API Checker leads to Privilege Escalation
- Pandora FMS
- Server-side request forgery (SSRF)
- CVSS 5.0 Medium
local-deep-research is Vulnerable to HTML Injection via Unescaped User Input in PDF Export (`pdf_service.py:_markdown_to_html`)
- Cross-site scripting (XSS)
- Server-side request forgery (SSRF)
<1.6.0 · fixed in 1.6.0
GHSA-fj2m-qvh9-jq4q · CVE-2026-43979 - CVSS 5.1 Medium
jishenghua jshERP updatePlatformConfigByKey Endpoint UserService.java getUserByWeixinCode server-side request forgery
- jishenghua jshERP
- Server-side request forgery (SSRF)
- CVSS 7.1 High
A Server-Side Request Forgery (SSRF) vulnerability exists in MLflow versions prior to 3.9.0. The `_create_webhook()` function in `mlflow/server/handlers.py` accepts a user-controlled `url` paramete...
- Server-side request forgery (SSRF)
<3.9.0 · fixed in 3.9.0
GHSA-65h7-c7c4-mghx · CVE-2026-2393 - CVSS 8.5 High
Open edX Platform: Server-Side Request Forgery (SSRF) in SAML Provider Data Sync Endpoint
- openedx-platform
- Server-side request forgery (SSRF)
- CVSS 5.1 Medium
Nexus Repository 3 - Improper LDAP Referral Handling
- Sonatype Nexus Repository
- Insecure deserialization
- Server-side request forgery (SSRF)
- CVSS 7.7 High
Budibase vulnerable to SSRF via trivial `.tar.gz` substring bypass in Plugin URL upload (`/api/plugin`)
- Server-side request forgery (SSRF)
<3.35.10 · fixed in 3.35.10
GHSA-xh5j-727m-w6gg · CVE-2026-45061 - CVSS 8.6 HighCritical · CVSS 7+ and EPSS
Next.js vulnerable to server-side request forgery in applications using WebSocket upgrades
- Server-side request forgery (SSRF)
>=13.4.13, <15.5.16 || >=16.0.0, <16.2.5 · fixed in 15.5.16, 16.2.5
GHSA-c4j6-fc7j-m34r · CVE-2026-44578 - CVSS 8.2 High
GuardDog has a blind GitHub URL rewrite in remote project scanning causes SSRF and `GH_TOKEN` exfiltration
- Server-side request forgery (SSRF)
>=1.0.0, <=2.9.0 · no fixed version yet
GHSA-587r-mc96-6f2p · CVE-2026-44971 - CVSS 8.6 High
Gotenberg: Server-Side Request Forgery via Chromium URL Endpoint with Redirect-Based Deny-List Bypass
- Server-side request forgery (SSRF)
<8.32.0 · fixed in 8.32.0
GHSA-chwh-f6gm-r836 · CVE-2026-42595 - CVSS 5.3 Medium
Akaunting Invoice PDF Rendering dompdf.php server-side request forgery
- Akaunting
- Server-side request forgery (SSRF)
- CVSS 9.1 CriticalCritical · CVSS 9+
LinkWarden: Server-Side Request Forgery (SSRF) in Link Creation via fetchTitleAndHeaders Function
- linkwarden
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
pupnp: Port truncation via atoi() cast in parse_uri() allows SSRF port confusion
- pupnp
- Server-side request forgery (SSRF)
- CWE-195
- CVSS 6.5 Medium
Postiz: TOCTOU DNS rebinding bypasses all SSRF URL validation paths
- gitroomhq postiz-app
- Server-side request forgery (SSRF)
- CVSS 2.3 Low
FastGPT: SSRF Vulnerability in Laf Workflow Node via Missing Internal Address Validation
- labring FastGPT
- Server-side request forgery (SSRF)
- CVSS 6.3 Medium
FastGPT: Stored MCP tool URL SSRF in FastGPT workflow execution
- labring FastGPT
- Server-side request forgery (SSRF)
- CVSS 7.7 High
FastGPT: Cloud metadata endpoint SSRF protection bypass via port specification, IPv6 mapping, hex/decimal IP encoding, and trailing dot
- labring FastGPT
- Server-side request forgery (SSRF)
- CVSS 5.1 Medium
SolidCAM-GPPL-IDE: Path traversal in `inc` directive enables file probing and NTLM-hash leak
- anzory SolidCAM-GPPL-IDE
- Path traversal
- Information disclosure
- CVSS 4.3 Medium
Bunsink has an SSRF bypass in `validate_webhook_url`
- Server-side request forgery (SSRF)
<2.1.3 · fixed in 2.1.3
GHSA-fp53-qcf8-2xx2 · CVE-2026-44502 - CVSS 6.3 Medium
MCP Registry has an unauthenticated SSRF: HTTP namespace verification dials 6to4 / NAT64 / site-local IPv6 addresses, bypassing private-address allowlist
- Server-side request forgery (SSRF)
<1.7.7 · fixed in 1.7.7
GHSA-r48c-v28r-pf6v · CVE-2026-44430 - CVSS 2.1 Low
MCP Registry's GitHub OIDC tokens are replayable across registry deployments due to shared audience
- Server-side request forgery (SSRF)
<1.7.6 · fixed in 1.7.6
GHSA-95c3-6vvw-4mrq · CVE-2026-44428 - CVSS 8.3 High
n8n-mcp affected by path traversal, redirect-following SSRF, and telemetry payload exposure
- Path traversal
- Information disclosure
<2.50.1 · fixed in 2.50.1
GHSA-8g7g-hmwm-6rv2 - CVSS 7.2 High
n8n-mcp webhook and API client paths has an authenticated SSRF
- Race condition
- Server-side request forgery (SSRF)
>=2.18.7, <2.50.2 · fixed in 2.50.2
GHSA-cmrh-wvq6-wm9r · CVE-2026-44694 - CVSS 7.1 High
PromptHub: Authenticated SSRF via IPv6 filter bypass in `POST /api/skills/fetch-remote`
- legeling PromptHub
- Server-side request forgery (SSRF)
- CWE-20
- CVSS 4.7 Medium
utcp-http vulnerable to SSRF via attacker-controlled OpenAPI servers[0].url in HTTP communication protocol
- Server-side request forgery (SSRF)
<1.1.2 · fixed in 1.1.2
GHSA-39j6-4867-gg4w · CVE-2026-44661 - CVSS 8.3 High
Ech0 has Server-Side Request Forgery (SSRF) via Connect Handler fetchPeerConnectInfo
- Server-side request forgery (SSRF)
<1.4.8-0.20260503040602-091d26d2d942 · fixed in 1.4.8-0.20260503040602-091d26d2d942
GHSA-8mc6-xjpr-h98x · CVE-2026-79659 - CVSS 7.9 High
Server-side request forgery vulnerability in GitHub Enterprise Server notebook viewer via URL parser confusion
- GitHub Enterprise Server
- Server-side request forgery (SSRF)
- CWE-436
- CVSS 8.1 High
Azure Monitor Action Group Notification System Elevation of Privilege Vulnerability
- Microsoft Azure Monitor Action Group notification system
- Server-side request forgery (SSRF)
- CVSS 3.7 Low
nuxt-og-image SSRF — bypass of GHSA-pqhr-mp3f-hrpp / v6.2.5 fix (IPv6 + redirect)
- Server-side request forgery (SSRF)
>=6.2.5, <6.4.9 · fixed in 6.4.9
GHSA-c2rm-g55x-8hr5 · CVE-2026-44589 - CVSS 7.7 High
FreeScout vulnerable to SSRF via Helper::sanitizeRemoteUrl: redirect destination not re-validated, allowing internal HTTP / cloud-metadata access
- freescout
- Server-side request forgery (SSRF)