CVE-2026-49328

Apache Fesod (Incubating) contains a Server-Side Request Forgery (SSRF) vulnerability in the UrlImageConverter component in versions prior to 2.0.2-incubating . The flaw allows an attacker to provide a malicious image URL, tricking the server into initiating outbound network requests to internal ...