PT-2026-28105

Name of the Vulnerable Software and Affected Versions Typebot versions prior to 3.16.0 Description Unauthenticated users can achieve Server-Side Request Forgery SSRF by providing a custom typebot definition containing server-side code blocks. The issue exists because the fetch function within the...

PT-2026-28098

Name of the Vulnerable Software and Affected Versions Gotenberg versions prior to 8.29.0 Description Gotenberg, an API for converting document formats, contains a flaw related to URL scheme handling. A previously implemented fix for CVE-2024-21527 could be bypassed by utilizing mixed-case or...

PT-2026-28101

Name of the Vulnerable Software and Affected Versions Coolify versions prior to 4.0.0-beta.464 Description An authorization bypass allows any authenticated user to access deployment details belonging to any team. The issue occurs because the GET /api/v1/deployments/uuid endpoint fails to use the...