PT-2026-76819

Name of the Vulnerable Software and Affected Versions 9Router versions 0.5.4 and earlier Description A Server-Side Request Forgery SSRF exists in the dashboard via the POST '/api/auth/oidc/test' endpoint. The application accepts a user-controlled issuerUrl parameter and passes it to the...

CVE-2026-72552: Server-Side Request Forgery (SSRF)

A server-side request forgery vulnerability in Dub as of 2026-07-10 allows unauthenticated remote attackers to make the server issue HTTP requests to arbitrary internal or external hosts via the metatags edge endpoint. The endpoint fetches any caller-supplied URL without applying a denylist or...