CVE-2026-82957

SSRF in Hyperledger FireFly Webhook Subscriptions CVE-2026-82957 A proof-of-concept exploit for CVE-2026-82957, a Server-Side Request Forgery CWE-918 in Hyperledger FireFly Core's webhooks event transport. Any client that can create an event subscription can register a webhook whose target URL is...

Hyperledger FireFly Core 1.5.0 Server-Side Request Forgery

Hyperledger FireFly Core version 1.5.0 and prior versions with the webhooks event transport contain a server-side request forgery vulnerability. The proof of concept creates a webhook subscription with a supplied URL and broadcasts a message to trigger the FireFly node request...