CVE-2026-122009

A flaw exists in DataLinkDC Dinky up to version 1.2.5 within the flink_web Proxy Endpoint component. Specifically, the function FlinkWebURITemplateProxyServlet.getNewTargetUri in the file dinky-admin/src/main/java/org/dinky/utils/FlinkWebURITemplateProxyServlet.java is vulnerable to Server-Side R...