CVE-2026-55455

CVE-2026-55455 affects Appsmith prior to 2.1, where the outbound HTTP host filter in WebClientUtils for REST API and GraphQL datasource plugins validates hosts only against an exact-match denylist. The full address-class checks (loopback, local, link-local, fc00::/7) exist only on a separate SMTP...