CVE-2026-110718 TurboDocx html-to-docx through 1.23.1 SSRF via img src Remote Image Download

TurboDocx html-to-docx through 1.23.1 contains a server-side request forgery vulnerability that allows attackers supplying HTML to make the server fetch internal URLs via img src attributes. Attackers can reference loopback, private, or cloud metadata addresses that bypass the loose isValidUrl...

CVE-2026-110718

The TurboDocx html-to-docx library (versions through 1.23.1 ) is vulnerable to a Server-Side Request Forgery (SSRF) . An attacker providing malicious HTML can force the server to fetch internal URLs using the img src attribute. This is possible because the isValidUrl() check is too loose, allowin...