Server-side request forgery (SSRF).

FacturaScripts: Authenticated SQL injection in the FacturaScripts REST API filter parameter via parenthesis bypass in `Where::sqlColumn`

• SQL injection
• Server-side request forgery (SSRF)

<2026.2 · fixed in 2026.2

Microsoft SharePoint Server Information Disclosure Vulnerability

• Microsoft SharePoint Enterprise Server 2016
• Microsoft SharePoint Server 2019
• Server-side request forgery (SSRF)

Nexus Repository 3 - Server-Side Request Forgery (SSRF) via HTTP Redirect

• Sonatype Nexus Repository 3
• Server-side request forgery (SSRF)

Nexus Repository 3 - Server-Side Request Forgery (SSRF) via Webhook: Global Capability

• Sonatype Nexus Repository 3
• Server-side request forgery (SSRF)

Server-side request forgery in Roundcube Webmail

• Roundcube Webmail
• Server-side request forgery (SSRF)

Nexus Repository - SSRF in SSL Certificate Retrieval

• Sonatype Nexus Repository
• Server-side request forgery (SSRF)

Sustainable Irrigation Platform 5.2.16 SSRF via Node-RED Callback URL

• Dan-in-CA SIP
• Server-side request forgery (SSRF)

Input Validation Vulnerabilities in Snowflake Spark Connector

• Snowflake Spark Connector
• SQL injection
• Server-side request forgery (SSRF)

louisho5 picobot web Tool web.go WebTool.Execute server-side request forgery

• louisho5 picobot
• Server-side request forgery (SSRF)

zhayujie chatgpt-on-wechat CowAgent Vision Tool vision.py Vision._download_to_data_url server-side request forgery

• zhayujie chatgpt-on-wechat CowAgent
• Server-side request forgery (SSRF)

nextlevelbuilder GoClaw invoke Endpoint create_video_byteplus.go bytePlusDownloadVideo server-side request forgery

• nextlevelbuilder GoClaw
• Server-side request forgery (SSRF)

crewai-tools SSRF redirect bypass exposes internal services

• Server-side request forgery (SSRF)

<1.15.1 · fixed in 1.15.1

Duplicate Advisory: Browser CDP discovery could accept blocked WebSocket URLs

• Server-side request forgery (SSRF)

<2026.6.6 · fixed in 2026.6.6

mosaxiv clawlet tool_web_fetch.go tools.webFetch server-side request forgery

• mosaxiv clawlet
• Server-side request forgery (SSRF)

mosaxiv clawlet IPv4 tool_web_fetch.go web_fetch server-side request forgery

• mosaxiv clawlet
• Server-side request forgery (SSRF)

Spring Boot Admin Server < 4.1.2 SSRF via Unauthenticated Instance Registration

• codecentric spring-boot-admin
• Server-side request forgery (SSRF)

Laravel-Mediable < 7.0.0 SSRF via RemoteUrlAdapter URL Handling

• plank laravel-mediable
• Server-side request forgery (SSRF)

NukeViet: Pre-authentication SSRF via X-Forwarded-Host

• Server-side request forgery (SSRF)

<4.6.00 · fixed in 4.6.00

Decidim: Push subscriptions can be abused for server-side requests

• Server-side request forgery (SSRF)

<0.30.9 || >=0.31.0.rc1, <0.31.5 || >=0.32.0.rc1, <0.32.0 · fixed in 0.30.9, 0.31.5, 0.32.0

Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs. A vulnerability in Apache Gravitino.

• Server-side request forgery (SSRF)

>=1.0.0, <1.3.0 · fixed in 1.3.0

WordPress Auto Featured Image (Auto Post Thumbnail) plugin <= 5.0.4 - Server Side Request Forgery (SSRF) vulnerability

• Themeisle Auto Featured Image (Auto Post Thumbnail)
• Server-side request forgery (SSRF)

WordPress Instant Image Generator plugin <= 2.1.4 - Server Side Request Forgery (SSRF) vulnerability

• bdthemes Instant Image Generator
• Server-side request forgery (SSRF)

WordPress PDF Generator for WordPress plugin <= 1.6.2 - Server Side Request Forgery (SSRF) vulnerability

• WP Swings PDF Generator for WordPress
• Server-side request forgery (SSRF)

WordPress WPJAM Basic plugin <= 7.0 - Server Side Request Forgery (SSRF) vulnerability

• denishua WPJAM Basic
• Server-side request forgery (SSRF)

Server-Side Request Forgery protection bypass in misp-modules html_to_markdown via IPv4-mapped IPv6 addresses

• misp-modules
• Server-side request forgery (SSRF)

kLOsk adloop write.py _validate_urls server-side request forgery

• kLOsk adloop
• Server-side request forgery (SSRF)

LogicalDOC Enterprise Version up to and before v9.1.1 is vulnerable to Server-Side Request Forgery (SSRF).

• Server-side request forgery (SSRF)

Helicone ai-gateway AWS Metadata Service service.rs build_target_url server-side request forgery

• Helicone ai-gateway
• Server-side request forgery (SSRF)

AstrBotDevs AstrBot MCP Test Endpoint tools.py ToolsRoute.test_mcp_connection server-side request forgery

• AstrBot
• Server-side request forgery (SSRF)

AstrBotDevs AstrBot market_list Endpoint plugin.py get_online_plugins server-side request forgery

• AstrBot
• Server-side request forgery (SSRF)

Duplicate Advisory: PraisonAI: Crawl4AI/Chromium backend is also affected by the `web_crawl` SSRF validation bypass

• Server-side request forgery (SSRF)

<=1.6.77 · no fixed version yet

OpenAI Provider - Moderately critical - Server-side Request Forgery - SA-CONTRIB-2026-053

• Drupal OpenAI Provider
• Server-side request forgery (SSRF)

TypeBot: SSRF protection bypass via IPv6 unspecified address in Typebot HTTP request execution

• baptisteArno typebot.io
• Server-side request forgery (SSRF)

Misskey: SSRF bypass in URL Preview

• misskey
• Server-side request forgery (SSRF)

RabbitMQ: UNC SSRF affecting the management UI on Windows

• rabbitmq-server
• Path traversal
• Server-side request forgery (SSRF)

Coturn: IPv4-mapped 127.0.0.1 bypasses default loopback peer protection

• coturn
• Server-side request forgery (SSRF)

MCP Atlassian: DNS-rebinding TOCTOU bypass of the SSRF fix (CVE-2026-27826)

• Server-side request forgery (SSRF)

<0.22.0 · fixed in 0.22.0

Kimai has Server-Side Request Forgery in Invoice PDF Rendering via Markdown Image URLs

• Server-side request forgery (SSRF)

<2.58.0 · fixed in 2.58.0

Duplicate Advisory: PraisonAI: Jobs API is unauthenticated by default and allows attacker-controlled webhook SSRF

• Server-side request forgery (SSRF)

<=4.6.77 · no fixed version yet

Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)

• Red Hat OpenShift AI 2.25
• Red Hat OpenShift AI 3.4
• Server-side request forgery (SSRF)

Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)

• Red Hat OpenShift AI 2.25
• Red Hat OpenShift AI 3.3
• Server-side request forgery (SSRF)

All-in-One Video Gallery <= 4.8.5 - Authenticated (Subscriber+) Server-Side Request Forgery via 'vdl' Parameter

• plugins360 All-in-One Video Gallery
• Server-side request forgery (SSRF)

zhayujie CowAgent Vision Tool vision.py _download_to_data_url server-side request forgery

• zhayujie CowAgent
• Server-side request forgery (SSRF)

Sipeed PicoClaw Guarded Web Fetch Flow web.go WebFetchTool.Execute server-side request forgery

• Sipeed PicoClaw
• Server-side request forgery (SSRF)

YesWiki has Unauthenticated Server-Side Request Forgery via ActivityPub `Signature.keyId`

• Server-side request forgery (SSRF)

>=4.6.2, <4.6.6 · fixed in 4.6.6

PAN-OS: Server-Side Request Forgery Vulnerability in Management Web Interface

• Palo Alto Networks Cloud NGFW
• Palo Alto Networks PAN-OS
• Server-side request forgery (SSRF)

aerostackdev aerostack-mcp mcp-whatsapp upload_media server-side request forgery

• aerostackdev aerostack-mcp
• Server-side request forgery (SSRF)

Ruby CSS Parser: SSRF and Local File Disclosure in `CssParser::Parser#read_remote_file`

• Server-side request forgery (SSRF)

<3.0.0 · fixed in 3.0.0

pyLoad: SSRF guard bypass via IPv6 6to4/NAT64 transition wrappers of internal IPs

• Server-side request forgery (SSRF)

<=0.5.0b3.dev100 · no fixed version yet

Monsta FTP < 2.14.5 SSRF via IPv4-Mapped IPv6 Address Bypass

• Monsta Limited of New Zealand Monsta FTP
• Server-side request forgery (SSRF)

Gradio < 6.20.0 - Open Redirect and SSRF via /gradio_api/file= endpoint

• gradio
• Open redirect
• Server-side request forgery (SSRF)

repomix - Server-Side Request Forgery via Unvalidated Repository URLs in POST /api/pack

• repomix
• Server-side request forgery (SSRF)

Weblate SSRF: outbound URL guard misses some private ranges

• Server-side request forgery (SSRF)

>=5.15, <2026.6 · fixed in 2026.6

oasdiff does not enforce --allow-external-refs=false on the git-revision load path (SSRF / local file read)

• Path traversal
• Server-side request forgery (SSRF)

>=1.13.2, <1.18.1 · fixed in 1.18.1

LocalAI POST /models/apply permits unauthenticated server-side request forgery through gallery URLs

• Server-side request forgery (SSRF)

<1.40.1-0.20260703213242-2cbb3c96b34d · fixed in 1.40.1-0.20260703213242-2cbb3c96b34d

FastGPT: SSRF in HTTP-tool OpenAPI schema importer via SwaggerParser $ref (bypasses the isInternalAddress guard)

• labring FastGPT
• Server-side request forgery (SSRF)

@better-auth/sso provider registration has server-side request forgery via unvalidated OIDC endpoints

• Server-side request forgery (SSRF)
• CWE-20

>=0.1.0, <1.6.11 · fixed in 1.6.11

@aborruso/ckan-mcp-server: SSRF via base_url allows access to internal networks (Potential fix bypass of CVE-2026-33060)

• Server-side request forgery (SSRF)

<0.4.106 · fixed in 0.4.106

NocoBase 2.1.20 Server-Side Request Forgery via serverRequest wrapper

• nocobase
• Server-side request forgery (SSRF)

Open WebUI has Blind Server Side Request Forgery in its Image Edit Functionality

• Server-side request forgery (SSRF)

<=0.7.2 · no fixed version yet