CVE-2026-68507

The self-hosted visual workspace ideon is vulnerable to Server-Side Request Forgery (SSRF) in versions prior to 0.9.5 . The application's link-preview endpoint lacks authentication, allowing anonymous users to supply arbitrary URLs for server-side fetching. While a guard exists in src/app/lib/ssr...