CVE-2026-57566 Readest: Unauthenticated SSRF / open request proxy in /api/opds/proxy

Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading experience. Prior to 0.11.10, the unauthenticated /api/opds/proxy route in apps/readest-app/src/app/api/opds/proxy/route.ts accepted an attacker-controlled URL and fetched it...

CVE-2026-57566 Readest: Unauthenticated SSRF / open request proxy in /api/opds/proxy

Readest is a modern, feature-rich ebook reader designed for seamless cross-platform access and an intuitive reading experience. Prior to 0.11.10, the unauthenticated /api/opds/proxy route in apps/readest-app/src/app/api/opds/proxy/route.ts accepted an attacker-controlled URL and fetched it...

CVE-2026-57566

The Readest ebook reader (versions prior to 0.11.10 ) contains an unauthenticated Server-Side Request Forgery (SSRF) vulnerability in the /api/opds/proxy route. The application fails to restrict URL schemes or block private, loopback, link-local, or metadata hosts when fetching attacker-controlle...

PT-2026-95142

Name of the Vulnerable Software and Affected Versions Vvveb versions prior to 1.0.8.5 Description The oEmbedProxy handler in admin/controller/editor/editor.php accepts an attacker-controlled url parameter and passes it to getUrl. The validateUrl function in system/functions.php only checks the...

CVE-2026-59095: Server-Side Request Forgery (SSRF)

LobeChat before 2.2.10-canary.18 contains a server-side request forgery vulnerability that allows authenticated attackers to direct internal HTTP requests to arbitrary URLs by supplying user-controlled input to the skill import service importFromUrl and topic cover update fetchImageFromUrl...

PT-2026-80214

Summarize before 0.17.0 contains a server-side request forgery vulnerability that allows attackers who control a podcast RSS feed to direct the host to fetch transcript content from loopback addresses, link-local addresses, RFC 1918 private ranges, or other reserved destinations by supplying...