6 matches found
EUVD-2026-120404
Replicate Cog through 0.23.1 contains a server-side request forgery vulnerability that allows attackers to cause the Cog process to make server-side HTTP requests by submitting prediction inputs with attacker-controlled URLs that are not validated against the resolved destination host or IP befor...
CVE-2026-56712
Replicate Cog through 0.23.1 contains a server-side request forgery vulnerability that allows attackers to cause the Cog process to make server-side HTTP requests by submitting prediction inputs with attacker-controlled URLs that are not validated against the resolved destination host or IP befor...
CVE-2026-56712 Replicate Cog 0.23.1 SSRF via cog.File and cog.Path URL Inputs
Replicate Cog through 0.23.1 contains a server-side request forgery vulnerability that allows attackers to cause the Cog process to make server-side HTTP requests by submitting prediction inputs with attacker-controlled URLs that are not validated against the resolved destination host or IP befor...
CVE-2026-56712
Replicate Cog versions through 0.23.1 are vulnerable to a Server-Side Request Forgery (SSRF) (CWE-918) in the cog.File and cog.Path predictor inputs. The root cause is a lack of validation against the resolved destination host or IP address before fetching attacker-controlled URLs. An attacker ca...
PT-2026-141106
Replicate Cog through 0.23.1 contains a server-side request forgery vulnerability that allows attackers to cause the Cog process to make server-side HTTP requests by submitting prediction inputs with attacker-controlled URLs that are not validated against the resolved destination host or IP befor...
CVE-2026-56712: replicate cog: Replicate Cog through 0.23.1 contains a server-side request forgery vulnerability that allows attackers to cause the…
Replicate Cog through 0.23.1 contains a server-side request forgery vulnerability that allows attackers to cause the Cog process to make server-side HTTP requests by submitting prediction inputs with attacker-controlled URLs that are not validated against the resolved destination host or IP befor...