CVE-2026-103980

Prior to version 0.9.6 , the self-hosted visual workspace ideon is vulnerable to Server-Side Request Forgery (SSRF) due to a bypass in the safeFetch protection. The root cause is that the isPrivateIP function in src/app/lib/ssrf.ts fails to recognize several IPv6 transition encodings, including I...