Advisories · Weakness
Server-side request forgery (SSRF).
The server made to send requests an attacker chooses. Every Advisory and CVE whose weakness (CWE) is one of these, newest first.
- CVSS 5.1 Medium
Joomla Extension - themexpert.com - SSRF via remote download in JMedia Extension < 1.6.0
- themexpert.com JMedia extension for Joomla
- Server-side request forgery (SSRF)
- CVSS 8.1 High
Apache Syncope: Low-privileged authenticated SSRF in Connectors and Resources check
- Apache Software Foundation Apache Syncope
- Server-side request forgery (SSRF)
- CVSS 6.4 Medium
Duplicate Advisory: SurrealDB: Port-specific --deny-net rules silently bypassed on HTTP redirect
- Server-side request forgery (SSRF)
* · no fixed version yet
GHSA-vq7c-3hc9-m5hr - CVSS 5.1 Medium
SurrealDB before 3.2.0 SSRF via JWKS URL hostname resolution
- surrealdb
- Server-side request forgery (SSRF)
- CVSS 7.5 High
FlareSolverr before version 3.4.7 contains a server-side request forgery (SSRF) vulnerability in the /v1 API endpoint.
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
1Panel-dev CordysCRM Third Party Edit Endpoint IntegrationConfigService.java getSqlBotSrc server-side request forgery
- 1Panel-dev CordysCRM
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
1Panel-dev CordysCRM Third Party Endpoint TokenService.java server-side request forgery
- 1Panel-dev CordysCRM
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
Sipeed PicoClaw web_fetch web.go isPrivateOrRestrictedIP server-side request forgery
- Sipeed PicoClaw
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
zhayujie CowAgent web_fetch.py WebFetch.execute server-side request forgery
- zhayujie CowAgent
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
zevorn rt-claw http_request swarm.c receiver_thread server-side request forgery
- zevorn rt-claw
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
zevorn rt-claw http_request tool_net.c claw_net_post server-side request forgery
- zevorn rt-claw
- Server-side request forgery (SSRF)
- CVSS 7.6 High
Duplicate Advisory: SurrealDB bypass of deny-net flags via redirect results in server-side request forgery (SSRF)
- Server-side request forgery (SSRF)
* · no fixed version yet
GHSA-xhwm-9486-8rgr - CVSS 6.9 Medium
zevorn rt-claw http_request net.c claw_net_post server-side request forgery
- zevorn rt-claw
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
nextlevelbuilder GoClaw web_fetch web_shared.go isPrivateIP server-side request forgery
- nextlevelbuilder GoClaw
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
Sipeed PicoClaw web.go web_fetch server-side request forgery
- Sipeed PicoClaw
- Server-side request forgery (SSRF)
- CVSS 7.6 High
CloudTAK: Authenticated full-read SSRF in the /api/esri* routes — user-controlled URL fetched with no IP-classification guard
- Server-side request forgery (SSRF)
<13.10.0 · fixed in 13.10.0
GHSA-r95q-fp26-h3hc · CVE-2026-55177 - CVSS 5.3 Medium
AstrBotDevs AstrBot Plugin Update plugin.py update_all_plugins server-side request forgery
- AstrBot
- Server-side request forgery (SSRF)
- CVSS 7.7 High
SSRF Protection Configuration Vulnerability
- IBM Langflow OSS
- Server-side request forgery (SSRF)
- CVSS 5.0 Medium
TAK-PS-Stats Web UI: Authenticated full-read SSRF in CloudTAK basemap import (PUT /api/basemap) — no IP-classification guard
- Server-side request forgery (SSRF)
<13.22.1 · fixed in 13.22.1
GHSA-vqrw-qphh-p34v · CVE-2026-54546 - CVSS 8.3 High
meta-ads-mcp: Server-Side Request Forgery (SSRF) in `upload_ad_image` via Unrestricted `image_url` Fetch
- Server-side request forgery (SSRF)
<1.0.115 · fixed in 1.0.115
GHSA-45gf-fjxp-cjpq · CVE-2026-54549 - CVSS 6.9 Medium
Dendrite 0.13.8 SSRF via Unauthenticated Legacy Media Download Endpoint
- matrix-org dendrite
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
poco-ai poco-claw task.py run_task server-side request forgery
- poco-ai poco-claw
- Server-side request forgery (SSRF)
- CVSS 8.4 High
Grav < 2.0.4 SSRF via Unrestricted cURL Protocols
- grav
- Server-side request forgery (SSRF)
- CVSS 4.9 Medium
OpenClaw 2026.4.14 < 2026.5.26 SSRF via Browser Snapshot
- OpenClaw
- Server-side request forgery (SSRF)
- CVSS 5.1 Medium
OpenClaw 2026.3.28 < 2026.5.19 Authorization Bypass via Browser Act Route
- OpenClaw
- Server-side request forgery (SSRF)
- CVSS 2.3 Low
OpenClaw 2026.4.20 < 2026.5.28 Policy Bypass via Media Upload
- OpenClaw
- Server-side request forgery (SSRF)
- CVSS 4.9 Medium
OpenClaw < 2026.6.6 Network Policy Bypass via exec-server
- OpenClaw
- Server-side request forgery (SSRF)
- CVSS 7.5 High
Xenforo 2.3.8 is vulnerable to SSRF.
- Server-side request forgery (SSRF)
- CVSS 7.1 High
ArcadeDB: IMPORT DATABASE allows SSRF and arbitrary local file read by authenticated users
- Path traversal
- Denial of service
<26.6.1 · fixed in 26.6.1
GHSA-8w86-m9h8-hvqg · CVE-2026-54077 - CVSS 6.8 Medium
BigBlueButton: Presentation URL Security Hardening
- bigbluebutton
- Server-side request forgery (SSRF)
- CVSS 7.7 High
stoatchat < 0.14.0 SSRF via DNS-based IP Blocklist Bypass
- stoatchat
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
text-generation-inference 3.3.7 SSRF via fetch_image in multimodal chat completions
- huggingface text-generation-inference
- Server-side request forgery (SSRF)
- CVSS 9.2 CriticalCritical · CVSS 9+
stoatchat before 0.13.5 Unauthenticated SSRF via proxy and embed endpoints
- stoatchat
- Server-side request forgery (SSRF)
- CVSS 4.7 Medium
ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation)
- Server-side request forgery (SSRF)
<0.31.0 · fixed in 0.31.0
GHSA-pr64-jmmf-jp54 · CVE-2026-58196 - CVSS 7.7 High
TensorZero Gateway: Arbitrary file read and SSRF in internal object storage endpoint
- Information disclosure
- Server-side request forgery (SSRF)
<2026.6.0 · fixed in 2026.6.0
GHSA-824w-x939-6cmc · CVE-2026-54457 - CVSS 6.3 Medium
safeurl is Missing IPv6 CIDR Ranges in Blocklist
- Server-side request forgery (SSRF)
<0.2.4 · fixed in 0.2.4
GHSA-xgch-x3mx-cm3c · CVE-2026-54452 - CVSS 2.9 Low
ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway
- Server-side request forgery (SSRF)
<0.29.1 · fixed in 0.29.1
GHSA-pph6-vfjv-vpjw · CVE-2026-54450 - CVSS 6.2 Medium
Wekan: Server-Side Request Forgery (SSRF) via webhook integration URLs
- wekan
- Server-side request forgery (SSRF)
- CVSS 6.9 Medium
Credential disclosure in Strands Agents Tools elasticsearch_memory tool
- Amazon strands-agents-tools
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
Koel: Full-read SSRF via podcast enclosure URL: isPublicHost() filter_var guard does not reject NAT64 (64:ff9b::/96) or 6to4 (2002::/16) IPv6-transition wrappers of internal IPv4
- Server-side request forgery (SSRF)
<9.7.1 · fixed in 9.7.1
GHSA-rjg7-r26h-cfp2 · CVE-2026-54494 - CVSS 6.3 Medium
Koel: Server-Side Request Forgery (SSRF) in radio station creation due to missing validation bail
- Server-side request forgery (SSRF)
<9.7.1 · fixed in 9.7.1
GHSA-jr4p-4xjh-fwvw · CVE-2026-50552 - CVSS 7.1 High
Koel: Incomplete fix for CVE-2026-47260 — systemic SSRF in podcast & radio fetch paths
- Server-side request forgery (SSRF)
<9.7.1 · fixed in 9.7.1
GHSA-6qvr-wjmv-v8mm · CVE-2026-54491 - CVSS 6.4 Medium
Koel has SSRF through Authenticated Subsonic podcast feed URLs
- Server-side request forgery (SSRF)
<9.7.0 · fixed in 9.7.0
GHSA-8q6q-m837-fv64 - CVSS 7.7 High
Koel: Authenticated Full-Read SSRF via Subsonic Internet Radio Stations
- Server-side request forgery (SSRF)
<9.7.0 · fixed in 9.7.0
GHSA-6p96-cfg5-4vhp · CVE-2026-54493 - CVSS 4.3 Medium
Koel: Authenticated Blind SSRF via Subsonic Podcast Channel Creation
- Server-side request forgery (SSRF)
<9.7.0 · fixed in 9.7.0
GHSA-w79m-f3jx-779v · CVE-2026-54492 - CVSS 7.7 High
Penpot: Authenticated SSRF in remote image import via create-file-media-object-from-url
- penpot
- Server-side request forgery (SSRF)
- CVSS 5.8 Medium
Vaultwarden: Server-side request forgery (SSRF) via Icon Endpoint Decimal/Hex/Octal IP Bypass
- dani-garcia vaultwarden
- Server-side request forgery (SSRF)
- CWE-1389
- CVSS 6.3 Medium
FastGPT: Shared axios SSRF guard validates only the initial URL before following redirects
- labring FastGPT
- Server-side request forgery (SSRF)
- CVSS 8.5 High
Duplicate Advisory: PraisonAI: DNS rebinding bypass in `web_crawl` SSRF protection allows internal response disclosure
- Server-side request forgery (SSRF)
<=1.6.77 · no fixed version yet
GHSA-92x2-g374-gcvx - CVSS 8.2 High
CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918)
- Adobe Content Credentials Rust SDK
- Adobe Content Credentials Command-Line Tool
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
mastergo-design mastergo-magic-mcp mcp__getComponentLink get-component-link.ts z.string server-side request forgery
- mastergo-design mastergo-magic-mcp
- Server-side request forgery (SSRF)
- CVSS 7.7 High
ColdFusion | Server-Side Request Forgery (SSRF) (CWE-918)
- Adobe ColdFusion 2025
- Adobe ColdFusion 2023
- Server-side request forgery (SSRF)
- CVSS 7.7 High
Nebula-mesh allows non-admin operators to disable webhook SSRF protection via `allow_private`
- Broken access control
- Server-side request forgery (SSRF)
>=0.6.0, <0.7.2 · fixed in 0.7.2
GHSA-7rx3-5wx3-5v76 · CVE-2026-63464 - CVSS 6.3 Medium
Simple Machines Forum SSRF via image proxy
- SimpleMachines SMF
- Server-side request forgery (SSRF)
- CVSS 6.8 Medium
Server-side request forgery in NVIDIA TensorRT-LLM
- NVIDIA TensorRT-LLM
- Server-side request forgery (SSRF)
- CVSS 9.2 CriticalCritical · CVSS 9+
AWS HealthLake MCP Server SSRF via Pagination URL
- awslabs.healthlake-mcp-server
- Server-side request forgery (SSRF)
- CVSS 8.6 High
Anyquery: Server-Side Request Forgery (SSRF) via Unrestricted SQLite Virtual Table Modules in Server Mode
- Broken access control
- Server-side request forgery (SSRF)
* · no fixed version yet
GHSA-hwrq-8wxh-q4xv · CVE-2026-54628 - CVSS 10.0 CriticalCritical · KEV, CVSS 9+KEV · ransomware
Server-side request forgery in SonicWall SMA1000
- SonicWall SMA1000
- Server-side request forgery (SSRF)
- CVSS 9.6 CriticalCritical · CVSS 9+
Adobe Experience Manager | Server-Side Request Forgery (SSRF) (CWE-918)
- Adobe Experience Manager as a Cloud Service
- Adobe Experience Manager 6.5 LTS
- Server-side request forgery (SSRF)
- CVSS 8.6 High
Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges
- Server-side request forgery (SSRF)
- CWE-1286
>=0.11.2, <1.9.12 || >=1.10.0, <1.10.11 || >=2.0.0, <2.0.19 || >=2.1.0, <2.1.15 || >=2.2.0, <2.2.4 · fixed in 1.9.12, 1.10.11, 2.0.19, 2.1.15, 2.2.4
GHSA-xw9q-2mv6-9fr8 · CVE-2026-50131