32166 matches found
CVE-2026-82270
Portkey AI Gateway through 1.15.2 contains a server-side request forgery vulnerability in the /v1/proxy/ route that lacks requestValidator middleware. Attackers can set the x-portkey-custom-host header to internal addresses and forward requests with Authorization headers to reach internal service...
EUVD-2026-67801
Portkey AI Gateway through 1.15.2 contains a server-side request forgery vulnerability in the /v1/proxy/ route that lacks requestValidator middleware. Attackers can set the x-portkey-custom-host header to internal addresses and forward requests with Authorization headers to reach internal service...
EUVD-2026-67794
Logto through 1.42.0 contains a server-side request forgery vulnerability in the OIDC SSO connector creation endpoint that fails to validate the issuer URL parameter. Tenant administrators with Management API credentials can supply arbitrary internal URLs to trigger HTTP GET requests to private...
CVE-2026-82263 Logto Server-Side Request Forgery via OIDC SSO Connector Issuer URL
Logto through 1.42.0 contains a server-side request forgery vulnerability in the OIDC SSO connector creation endpoint that fails to validate the issuer URL parameter. Tenant administrators with Management API credentials can supply arbitrary internal URLs to trigger HTTP GET requests to private...
CVE-2026-82263
Logto through 1.42.0 contains a server-side request forgery vulnerability in the OIDC SSO connector creation endpoint that fails to validate the issuer URL parameter. Tenant administrators with Management API credentials can supply arbitrary internal URLs to trigger HTTP GET requests to private...
EUVD-2026-67793
Logto through 1.42.0 contains a server-side request forgery vulnerability in the POST /api/hooks/:id/test endpoint that accepts arbitrary URLs without host validation. Tenant administrators with Management API tokens can make the server issue HTTP POST requests to internal URLs and retrieve...
CVE-2026-5096
The Everest Forms plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 3.4.4. This is due to the loadpreviousfieldvalue method in class-evf-form-task.php accepting arbitrary URL values from $POST data for upload fields without domain restriction,...
EUVD-2026-66209
Trestle has Server-Side Template Injection SSTI via Recursive Template Re-evaluation of Untrusted Data...
Trestle has Server-Side Template Injection (SSTI) via Recursive Template Re-evaluation of Untrusted Data
Impact A Server-Side Template Injection SSTI vulnerability exists in multiple locations of trestle's Jinja2 rendering pipeline due to a systemic pattern: untrusted data is re-parsed as Jinja2 template source code without sandboxing. This advisory tracks the root cause across all affected code...
CVE-2026-54745
Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the Kubeflow Pipelines frontend exposes an unauthenticated server-side request forgery vulnerability through the /proxy/ route in frontend/server/proxy-middleware.ts. The...
CVE-2026-54745 Kubeflow Pipelines: Unauthenticated SSRF and HTTP smuggling in Kubeflow Pipelines frontend /_proxy/ route, bypasses ENABLE_AUTHZ=true
Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the Kubeflow Pipelines frontend exposes an unauthenticated server-side request forgery vulnerability through the /proxy/ route in frontend/server/proxy-middleware.ts. The...
CVE-2026-54745
Kubeflow Pipelines prior to 2.17.0 is affected by an unauthenticated SSRF vulnerability in the frontend /_proxy/ route (proxy-middleware.ts). The _routePathWithReferer() function forwards an attacker-controlled HTTP/HTTPS origin to createProxyMiddleware without a host allowlist or filtering for l...
WordPress Animation Addons for Elementor plugin < 2.7.2 - Unauthenticated Server-Side Request Forgery vulnerability
Unauthenticated Server-Side Request Forgery vulnerability discovered by Seongwon Lee in WordPress Plugin Animation Addons for Elementor versions 2.7.2...
WordPress WooMS plugin <= 9.14 - Unauthenticated Server-Side Request Forgery and Sensitive Information Disclosure vulnerability
Unauthenticated Server-Side Request Forgery and Sensitive Information Disclosure vulnerability discovered by dangnosuy in WordPress Plugin WooMS versions = 9.14...
CVE-2026-82243
Budibase Server before 3.41.3 contains a server-side request forgery vulnerability in the datasource verify endpoint that allows builder-level users to supply arbitrary URLs without SSRF validation. Attackers can exploit this to leak internal CouchDB credentials by making requests to...
gha-lab-f1c8785cc8
Moderne DOM-API Dieses Projekt basiert auf dem nativen DOMDocument von PHP und bietet Zugriff auf moderne DOM-APIs, wie man es von clientseitigem Code im Browser gewohnt ist. Die Durchführung von DOM-Manipulationen im serverseitigen Code verbessert die Art und Weise, wie dynamische Seiten erstell...
CVE-2026-5096
The Everest Forms WordPress plugin (versions
CVE-2026-82246
Budibase Server before 3.41.3 contains a server-side request forgery vulnerability in the query import endpoint that fails to validate user-supplied URLs before fetching content. Attackers can submit arbitrary URLs to retrieve responses from internal services including cloud metadata endpoints an...
CVE-2026-82243 Budibase Server before 3.41.3 SSRF with Credential Leakage
Budibase Server before 3.41.3 contains a server-side request forgery vulnerability in the datasource verify endpoint that allows builder-level users to supply arbitrary URLs without SSRF validation. Attackers can exploit this to leak internal CouchDB credentials by making requests to...
