EUVD-2026-114117

PipesHub before 0.10.0 contains a server-side request forgery vulnerability in ImageParser.fetchsingleurl that allows attackers to make the indexing service fetch internal addresses by embedding image URLs in documents. Attackers can supply Markdown or HTML via uploads, synced mailboxes, or web...

CVE-2026-119712

PipesHub before 0.10.0 contains a server-side request forgery vulnerability in ImageParser.fetchsingleurl that allows attackers to make the indexing service fetch internal addresses by embedding image URLs in documents. Attackers can supply Markdown or HTML via uploads, synced mailboxes, or web...

CVE-2026-119712

The PipesHub software (versions before 0.10.0 ) is vulnerable to a Server-Side Request Forgery (SSRF) vulnerability within the ImageParser._fetch_single_url function. Attackers can exploit this by embedding malicious image URLs in Markdown or HTML content provided through uploads, synced mailboxe...