CVE-2026-58441

SSRF in restore-repo via unsanitized pullrequest.yml Head.CloneURL...

EUVD-2026-58168

SSRF in restore-repo via unsanitized pullrequest.yml Head.CloneURL...

CVE-2026-58441: Server-Side Request Forgery (SSRF)

SSRF in restore-repo via unsanitized pullrequest.yml Head.CloneURL...

Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF in the restore-repo when parsing the pullrequest.yml file. An attacker can cause the server to initiate network requests to arbitrary URLs or disclose local git repositories by supplying a crafted...