CVE-2026-124558

A Server-Side Request Forgery (SSRF) vulnerability exists in DataLinkDC Dinky versions up to 1.2.5 . The flaw is located in the SqlGateway.onOpen function within the SqlGateway.java file of the sql-gateway component. An attacker can exploit this by manipulating the connectAddress argument to perf...