CVE-2026-95813

The software e621ng (versions before 26.09.16 ) is vulnerable to an Open Redirect due to the improper handling of untrusted request parameters. Specifically, the PaginatorComponent and controller navigation links pass these parameters directly to the Rails url_for function. An attacker can provid...

CVE-2026-95813 e621ng before 26.09.16 Open Redirect via URL Parameters

e621ng versions before 26.09.16 pass untrusted request parameters directly to Rails urlfor in PaginatorComponent and controller navigation links, allowing attackers to redirect pagination and navigation controls to attacker-controlled origins. Attackers can supply host, protocol, and port query...

EUVD-2026-84860

e621ng versions before 26.09.16 pass untrusted request parameters directly to Rails urlfor in PaginatorComponent and controller navigation links, allowing attackers to redirect pagination and navigation controls to attacker-controlled origins. Attackers can supply host, protocol, and port query...