cve-2026-46391

CVE-2026-46391 - Esposizione di Credenziali tramite SSRF in @haxtheweb/open-apis Proof of concept per CVE-2026-46391. Sfrutta la vulnerabilità SSRF nell'endpoint cacheAddress di @haxtheweb/open-apis e cattura le credenziali dell'account di servizio inviate nel callback. Compilazione root@kitploit...

@haxtheweb/create (>=10.0.0, <=11.0.2), @haxtheweb/open-apis (11.0.2) potentially affected by CVE-2025-48996 via @haxtheweb/open-apis (10.0.1)

@haxtheweb/open-apis NPM version 10.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on @haxtheweb/open-apis and may be impacted: - @haxtheweb/create =10.0.0, =11.0.2 - @haxtheweb/open-apis 11.0.2 Source cves: CVE-2025-48996 Source advisory:...