CVE-2026-55160

The self-hosted RSS reader Stringer is vulnerable to an unrestricted Server-Side Request Forgery (SSRF) in versions prior to commit 75cb095 . This flaw allows any authenticated user to compel the server to send arbitrary HTTP/HTTPS requests to internal networks, localhost services, and cloud meta...