CVE-2026-77581

BentoPDF, a self-hostable client-side PDF toolkit, contains a Server-Side Request Forgery (SSRF) vulnerability in the cloud/cors-proxy-worker.js component (versions 2.8.6 and earlier ). The root cause is a DNS-based hostname allowlist bypass where the isPrivateOrReservedHost() function validates ...

CVE-2026-77581 BentoPDF: SSRF in cors-proxy-worker.js via DNS-based hostname allowlist bypass

BentoPDF is a client-side PDF toolkit that is self hostable. In 2.8.6 and earlier, the certificate and timestamp CORS proxy in cloudflare/cors-proxy-worker.js uses isPrivateOrReservedHost to validate a supplied hostname separately from the DNS resolution used by fetchtargetUrl, allowing an...

CVE-2026-91079

Huly Platform through 0.7.426 contains a server-side request forgery vulnerability in the print service due to missing hostname allowlist validation. Authenticated workspace members can supply arbitrary URLs to the print endpoint, which Puppeteer renders and returns as downloadable PDFs or images...

CVE-2026-91079

Huly Platform through 0.7.426 is affected by a server-side request forgery (SSRF) vulnerability in its print service . The root cause is a missing hostname allowlist validation : authenticated workspace members can supply arbitrary URLs to the print endpoint, which Puppeteer renders and returns a...

CVE-2026-91079 Huly Platform through 0.7.426 SSRF via Print Service

Huly Platform through 0.7.426 contains a server-side request forgery vulnerability in the print service due to missing hostname allowlist validation. Authenticated workspace members can supply arbitrary URLs to the print endpoint, which Puppeteer renders and returns as downloadable PDFs or images...

CVE-2026-91079 Huly Platform through 0.7.426 SSRF via Print Service

Huly Platform through 0.7.426 contains a server-side request forgery vulnerability in the print service due to missing hostname allowlist validation. Authenticated workspace members can supply arbitrary URLs to the print endpoint, which Puppeteer renders and returns as downloadable PDFs or images...

EUVD-2026-77714

Huly Platform through 0.7.426 contains a server-side request forgery vulnerability in the print service due to missing hostname allowlist validation. Authenticated workspace members can supply arbitrary URLs to the print endpoint, which Puppeteer renders and returns as downloadable PDFs or images...

CVE-2026-91079 Huly Platform through 0.7.426 SSRF via Print Service

Huly Platform through 0.7.426 contains a server-side request forgery vulnerability in the print service due to missing hostname allowlist validation. Authenticated workspace members can supply arbitrary URLs to the print endpoint, which Puppeteer renders and returns as downloadable PDFs or images...

PT-2026-91294

Huly Platform through 0.7.426 contains a server-side request forgery vulnerability in the print service due to missing hostname allowlist validation. Authenticated workspace members can supply arbitrary URLs to the print endpoint, which Puppeteer renders and returns as downloadable PDFs or images...

CVE-2026-53500

Thumbor is an open-source photo thumbnail service by globo.com. Prior to 7.8.0, the ALLOWEDSOURCES configuration passes plain strings to re.match without escaping dots, so a hostname differing at dot positions can match the allowlist. This issue is fixed in 7.8.0...