Server-side Request Forgery (SSRF)

Overview 9router is a 9Router CLI - Start and manage 9Router server Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the fetch process in the /v1/web/fetch endpoint when user-supplied URLs are passed to external scraping providers without adequate validatio...

CVE-2026-63313

9Router before 0.4.72 contains a server-side request forgery SSRF vulnerability in the /v1/web/fetch endpoint. The endpoint accepts a user-controlled url parameter and passes it to a configured external scraping provider Firecrawl, Jina Reader, Tavily, or Exa to fetch content. The URL is only...

CVE-2026-63313: Server-Side Request Forgery (SSRF)

9Router before 0.4.72 contains a server-side request forgery SSRF vulnerability in the /v1/web/fetch endpoint. The endpoint accepts a user-controlled url parameter and passes it to a configured external scraping provider Firecrawl, Jina Reader, Tavily, or Exa to fetch content. The URL is only...