MINI-QPR4-MFG4-GV2H

Bulletin has no description...

Cloudflare has SSRF via redirect following through its image-binding-transform endpoint (incomplete fix for GHSA-qpr4)

Summary The fetch call for remote images in packages/integrations/cloudflare/src/utils/image-binding-transform.ts line 28 uses the default redirect: 'follow' behavior. This allows the Cloudflare Worker to follow HTTP redirects to arbitrary URLs, bypassing the isRemoteAllowed domain allowlist chec...

GHSA-QPR4-C339-7VQ8

creationtimestamp| type| source ---|---|--- 2025-09-05 14:09:49+00:00| seen| https://bsky.app/profile/azu.bsky.social/post/3ly3tm25ylf2r...

CGA-QPR4-X3V9-RVJ7

Bulletin has no description...