CVE-2026-121431

AzuraCast versions before 0.24.0 are vulnerable to a Server-Side Request Forgery (SSRF) flaw. Station users with WebHooks permission can bypass the UserUrlFilter guard using the Mastodon, Telegram, GroupMe, and RadioReg connectors. By setting the instance_url, api, or webhookurl parameters to int...

EUVD-2026-115853

AzuraCast before 0.24.0 contains a server-side request forgery vulnerability that allows station users with WebHooks permission to bypass the UserUrlFilter guard via the Mastodon, Telegram, GroupMe, and RadioReg connectors. Attackers can set instanceurl, api, or webhookurl to internal addresses a...

CVE-2026-121431 AzuraCast before 0.24.0 SSRF Filter Bypass via Webhook Connectors

AzuraCast before 0.24.0 contains a server-side request forgery vulnerability that allows station users with WebHooks permission to bypass the UserUrlFilter guard via the Mastodon, Telegram, GroupMe, and RadioReg connectors. Attackers can set instanceurl, api, or webhookurl to internal addresses a...

CVE-2026-121424 Nodemailer 3.0.0 before 10.1.4 Address Parsing Bypass via Nested Comments

Nodemailer from 3.0.0 before 10.1.4 contains an address parsing vulnerability in addressparser that allows remote attackers to redirect recipients by ending nested RFC 5322 comments at the first closing parenthesis. Attackers can submit addresses whose nested comment hides an attacker address,...

CVE-2026-121424

Nodemailer from 3.0.0 before 10.1.4 contains an address parsing vulnerability in addressparser that allows remote attackers to redirect recipients by ending nested RFC 5322 comments at the first closing parenthesis. Attackers can submit addresses whose nested comment hides an attacker address,...

CVE-2026-121424

The Nodemailer library (versions 3.0.0 before 10.1.4) contains an address parsing vulnerability in the addressparser component. The root cause is that the parser incorrectly handles nested RFC 5322 comments by ending them at the first closing parenthesis. This allows remote attackers to craft add...

CVE-2026-121424 Nodemailer 3.0.0 before 10.1.4 Address Parsing Bypass via Nested Comments

Nodemailer from 3.0.0 before 10.1.4 contains an address parsing vulnerability in addressparser that allows remote attackers to redirect recipients by ending nested RFC 5322 comments at the first closing parenthesis. Attackers can submit addresses whose nested comment hides an attacker address,...

CVE-2026-121424 Nodemailer 3.0.0 before 10.1.4 Address Parsing Bypass via Nested Comments

Nodemailer from 3.0.0 before 10.1.4 contains an address parsing vulnerability in addressparser that allows remote attackers to redirect recipients by ending nested RFC 5322 comments at the first closing parenthesis. Attackers can submit addresses whose nested comment hides an attacker address,...

EUVD-2026-115956

Nodemailer from 3.0.0 before 10.1.4 contains an address parsing vulnerability in addressparser that allows remote attackers to redirect recipients by ending nested RFC 5322 comments at the first closing parenthesis. Attackers can submit addresses whose nested comment hides an attacker address,...

CVE-2026-121421

SurrealDB 3.1.0 before 3.3.0 contains a server-side request forgery vulnerability in network-capability matching because port-specific --deny-net rules HOST:PORT or IP:PORT match only a literal host string, while the resolved-IP check discards the port. Authenticated users can call http:: functio...

CVE-2026-121422

SurrealDB versions 3.1.0 through 3.3.0 are vulnerable to a Server-Side Request Forgery (SSRF) flaw. The issue arises when database Owners provide a JWKS URL that omits port 80 or 443; the system uses implicit default ports to bypass port-specific deny-net rules . This allows the application to pe...

CVE-2026-121422

SurrealDB from 3.1.0 before 3.3.0 contains a server-side request forgery vulnerability that allows database Owners to bypass port-specific deny-net rules by using JWKS URLs with implicit default ports. Attackers can configure a JWT or record access method whose JWKS URL omits port 80 or 443,...

EUVD-2026-115954

SurrealDB from 3.1.0 before 3.3.0 contains a server-side request forgery vulnerability that allows database Owners to bypass port-specific deny-net rules by using JWKS URLs with implicit default ports. Attackers can configure a JWT or record access method whose JWKS URL omits port 80 or 443,...

CVE-2026-121422 SurrealDB from 3.1.0 before 3.3.0 SSRF via JWKS Implicit Default Port Bypass

SurrealDB from 3.1.0 before 3.3.0 contains a server-side request forgery vulnerability that allows database Owners to bypass port-specific deny-net rules by using JWKS URLs with implicit default ports. Attackers can configure a JWT or record access method whose JWKS URL omits port 80 or 443,...

CVE-2026-121421

SurrealDB versions 3.1.0 before 3.3.0 are vulnerable to a server-side request forgery (SSRF) vulnerability in the network-capability matching logic. The root cause is that port-specific --deny-net rules (matching HOST:PORT or IP:PORT) only evaluate against literal host strings, whereas the resolv...

EUVD-2026-115953

SurrealDB 3.1.0 before 3.3.0 contains a server-side request forgery vulnerability in network-capability matching because port-specific --deny-net rules HOST:PORT or IP:PORT match only a literal host string, while the resolved-IP check discards the port. Authenticated users can call http:: functio...

CVE-2026-121421 SurrealDB 3.1.0 before 3.3.0 SSRF via Port-Specific --deny-net Host Aliasing Bypass

SurrealDB 3.1.0 before 3.3.0 contains a server-side request forgery vulnerability in network-capability matching because port-specific --deny-net rules HOST:PORT or IP:PORT match only a literal host string, while the resolved-IP check discards the port. Authenticated users can call http:: functio...

CVE-2026-121421 SurrealDB 3.1.0 before 3.3.0 SSRF via Port-Specific --deny-net Host Aliasing Bypass

SurrealDB 3.1.0 before 3.3.0 contains a server-side request forgery vulnerability in network-capability matching because port-specific --deny-net rules HOST:PORT or IP:PORT match only a literal host string, while the resolved-IP check discards the port. Authenticated users can call http:: functio...

CVE-2026-121421 SurrealDB 3.1.0 before 3.3.0 SSRF via Port-Specific --deny-net Host Aliasing Bypass

SurrealDB 3.1.0 before 3.3.0 contains a server-side request forgery vulnerability in network-capability matching because port-specific --deny-net rules HOST:PORT or IP:PORT match only a literal host string, while the resolved-IP check discards the port. Authenticated users can call http:: functio...

CVE-2026-121422 SurrealDB from 3.1.0 before 3.3.0 SSRF via JWKS Implicit Default Port Bypass

SurrealDB from 3.1.0 before 3.3.0 contains a server-side request forgery vulnerability that allows database Owners to bypass port-specific deny-net rules by using JWKS URLs with implicit default ports. Attackers can configure a JWT or record access method whose JWKS URL omits port 80 or 443,...