Advisories · Technology

refly.

Every CVE that names refly among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-101052 CVE record

CVSS 6.9 Medium

refly-ai refly JWT Token app.config.ts hard-coded credentials
- refly
- Hard-coded credentials
Not analysed yet 28 Sept 2026
CVE-2026-91199 CVE record

CVSS 5.3 Medium

Refly through 1.1.0 Server-Side Request Forgery via scrape endpoint
- refly
- Server-side request forgery (SSRF)
Not analysed yet 14 Sept 2026