CVE-2026-119712

PipesHub before 0.10.0 contains a server-side request forgery vulnerability in ImageParser.fetchsingleurl that allows attackers to make the indexing service fetch internal addresses by embedding image URLs in documents. Attackers can supply Markdown or HTML via uploads, synced mailboxes, or web...