Lucene search
+L

1 matches found

OSV
OSV
added 2026/03/11 12:37 a.m.7 views

GHSA-7Q3Q-5PX6-4C5P Quill vulnerable to SSRF via unvalidated URL from Apple notarization log retrieval

Impact Quill before version v0.7.1 contains a Server-Side Request Forgery SSRF vulnerability when attempting to fetch the Apple notarization submission logs. Exploitation requires the ability to modify API responses from Apple's notarization service, which is not possible under standard network...

5.3CVSS5.9AI score0.00097EPSS
SaveExploits0References6
Rows per page
Query Builder