CVE-2026-55807

The Media module in Drupal core contains a Server-Side Request Forgery (SSRF) vulnerability (CVE-2026-55807) stemming from its oEmbed URL discovery code. This flaw could be leveraged to trick the server into making unauthorized requests to arbitrary URLs. Affected versions include 10.5.x prior to...