EUVD-2026-97127

A weakness has been identified in Appwrite up to 2.3.0. This vulnerability affects the function PublicHostname of the file src/Appwrite/Platform/Modules/Avatars/Http/Screenshots/Get.php of the component Browser Screenshot Service. This manipulation of the argument url causes server-side request...

CVE-2026-108770

The Appwrite platform, specifically the Browser Screenshot Service component in versions up to 2.3.0 , is vulnerable to a Server-Side Request Forgery (SSRF) . The root cause is the improper handling of the url argument within the PublicHostname function of the file src/Appwrite/Platform/Modules/A...