Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.3PhastPress <= 3.10 - Unauthenticated Server-Side Request Forgery via 'src' ParameterOct 15, 2026
- High8.4Renovate before 44.79.0 SSRF via HTTP Preset URLs and customDatasourcesOct 14, 2026
- Low1.1A server-side request forgery vulnerability in Palo Alto Networks Checkov by Prisma® Cloud enables a local unauthenticated user to make unauthorized network requests f…Oct 14, 2026
- Medium6.8InvoiceShelf is an open-source web & mobile app that helps track expenses, payments and create professional invoices and estimates.Oct 14, 2026
- Medium6.8BentoPDF is a privacy-focused PDF toolkit that runs in the browser.Oct 14, 2026
- Medium4.9Redash is a package for data visualization and sharing.Oct 14, 2026
- High7.1Flyto2 Core is an execution kernel for automation and AI-agent workflows.Oct 14, 2026
- Critical9.9KEDA is a Kubernetes-based Event Driven Autoscaling component.Oct 14, 2026
- Medium6.9Portkey AI Gateway 1.14.0 through 1.15.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to reach loopback and Docker host s…Oct 14, 2026
- High8.2TurboDocx html-to-docx through 1.23.1 contains a server-side request forgery vulnerability that allows attackers supplying HTML to make the server fetch internal URLs…Oct 14, 2026
- UnknownWhen OpenID sign-in is enabled, Gitea processes unauthenticated assertion parameters and sends an HTTP POST request to the caller-supplied OpenID provider endpoint dur…Oct 14, 2026
- Medium5.3When OpenID sign-in is enabled, Gitea accepts a user-supplied OpenID URL and performs discovery requests without validating the destination against internal network addresses.Oct 14, 2026
- Critical9.2Kan 0.5.5 through 0.6.0 contains an unauthenticated server-side request forgery vulnerability in the /api/download/attatchment route due to an incomplete fix for CVE-2026-32255.Oct 14, 2026
- Medium5.3ruoyi-vue-pro through 2026.09 contains a server-side request forgery vulnerability in the yudao-module-ai image service that allows authenticated users to make the ser…Oct 14, 2026
- Medium4.1The FV Flowplayer Video Player WordPress plugin before 7.5.55.7212 does not properly validate a user-supplied URL before performing a server-side fetch, and an existin…EPSS 0.2%Oct 14, 2026
- High8.6ColdFusion is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.EPSS 0.5%Oct 13, 2026
- Medium6.5Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.EPSS 0.8%Oct 13, 2026
- Medium5.3Finsys Dockhand before 1.0.45 contains a server-side request forgery vulnerability in the ipCategory() function in src/lib/server/url-safety.ts, which fails to check N…EPSS 0.3%Oct 13, 2026
- Low2.3Kavita 0.9.0 through 0.9.1.4 contains a server-side request forgery vulnerability that allows authenticated users to bypass the SSRF blocklist through DNS rebinding or…EPSS 0.3%Oct 13, 2026
- Medium6.9Razorpay IFSC Ruby gem through 2.0.62 contains a server-side request forgery vulnerability that allows attackers to redirect API requests by supplying a crafted IFSC c…EPSS 0.3%Oct 13, 2026
- High7.5Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.EPSS 0.5%Oct 13, 2026
- High7.5Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.EPSS 0.5%Oct 13, 2026
- High7.5Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.EPSS 0.6%Oct 13, 2026
- Medium5.7Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over an adjacent network.EPSS 0.4%Oct 13, 2026
- High8.6CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.EPSS 0.5%Oct 13, 2026
94 records · page 1 of 4
PreviousNext