Ghost: Private IP Filtering Bypass via IPv6 Transition Addresses
CVE-2026-105648
### Impact A validation issue allowed some functionality, such as Webmentions, to be abused by an unauthenticated user
#cwe-918
共收录 2014 条相关情报。
← 返回所有主题Next.js has Server-Side Request Forgery in Image Optimization
CVE-2026-94483
## Impact An attacker-controlled, allow-listed remote URL can lead to server-side request forgery (e.g. to private IPs)
Backstage is an open framework for building developer portals. Prior to 3.5.1, 3.6.2, 3.7.2, 3.8.2 and 3.9.1, the @backstage/plugin-catalog-backend package is affected by improp...
CVE-2026-106498
Backstage is an open framework for building developer portals. Prior to 3.5.1, 3.6.2, 3.7.2, 3.8.2 and 3.9.1, the @backs
Backstage is an open framework for building developer portals. From 0.3.0 until 0.3.8, the @backstage/plugin-scaffolder-backend-module-sentry package is affected by improper inp...
CVE-2026-106459
Backstage is an open framework for building developer portals. From 0.3.0 until 0.3.8, the @backstage/plugin-scaffolder-
Backstage is an open framework for building developer portals. From 0.11.12 until 1.14.7 and 1.15.5, the @backstage/plugin-techdocs-node package is affected by improper validati...
CVE-2026-106455
Backstage is an open framework for building developer portals. From 0.11.12 until 1.14.7 and 1.15.5, the @backstage/plug
Server-side request forgery in the OpenAPI schema processing of the agent import functionality in Amazon Bedrock AgentCore Starter Toolkit before 0.3.14 might allow an authentic...
CVE-2026-106032
Server-side request forgery in the OpenAPI schema processing of the agent import functionality in Amazon Bedrock AgentCo
With `[migrations] ALLOWED_DOMAINS` set to a matching entry such as `*` or a hostname wildcard, Gitea's migration URL validation could permit reserved and link-local addresses, ...
CVE-2026-96400
With `[migrations] ALLOWED_DOMAINS` set to a matching entry such as `*` or a hostname wildcard, Gitea's migration URL va
Gitea validated a push mirror's remote address against the `[migrations]` allow and block lists only when the mirror was created. Each synchronization passed the stored address ...
CVE-2026-89430
Gitea validated a push mirror's remote address against the `[migrations]` allow and block lists only when the mirror was
Gitea validates a repository migration hostname against its network allow and block lists before invoking Git, but the Git subprocess independently resolves the hostname when co...
CVE-2026-70357
Gitea validates a repository migration hostname against its network allow and block lists before invoking Git, but the G
Gitea validated the initial remote URL for push mirrors, wiki remote checks, and fetches of migrated pull request heads, but the subsequent raw Git operations followed HTTP redi...
CVE-2026-104636
Gitea validated the initial remote URL for push mirrors, wiki remote checks, and fetches of migrated pull request heads,
Insufficient validation of OIDC bearer token configuration could allow a user with specific high privileges to direct requests to arbitrary destinations.
CVE-2026-101150
Insufficient validation of OIDC bearer token configuration could allow a user with specific high privileges to direct re
Insufficient validation of OIDC SSO provider configuration could allow a user with specific high privileges to direct requests to arbitrary destinations.
CVE-2026-101149
Insufficient validation of OIDC SSO provider configuration could allow a user with specific high privileges to direct re
Gitea's repository migration and pull mirror egress checks could be bypassed with a hostname that returns multiple DNS answers, because the address that was validated was not ne...
CVE-2026-101029
Gitea's repository migration and pull mirror egress checks could be bypassed with a hostname that returns multiple DNS a
A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed a repository contributor to cause the appliance to issue requests to a...
CVE-2026-96890
A Server-Side Request Forgery (SSRF) vulnerability was identified in GitHub Enterprise Server that allowed a repository
i18next-http-backend incomplete URL validation permits SSRF
CVE-2026-105800
There is an SSRF vulnerability when using `i18next-http-backend`. A colon in an attacker-controlled language value can m
i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Prior to 4.0.2, attacker-controlled language or namespace va...
CVE-2026-105800
i18next-http-backend is a backend layer for i18next that loads translation resources in Node.js, browsers, and Deno. Pri
An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. An incomplete fix for CVE-2026-15307 in Django spatial lookups allows an attacker wh...
CVE-2026-87890
An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. An incomplete fix for CVE-2
Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, authenticated device registration through /api/devices can sup...
CVE-2026-105790
Microsoft UFO is an open-source framework for intelligent automation across devices and platforms. Prior to 3.0.9, authe
Unauthenticated Server Side Request Forgery (SSRF) in Instapage Plugin <= 3.7.2 versions.
CVE-2026-39728
Unauthenticated Server Side Request Forgery (SSRF) in Instapage Plugin <= 3.7.2 versions.
Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor <= 1.0.4 versions.
CVE-2026-39719
Unauthenticated Server Side Request Forgery (SSRF) in PDF Smart Viewer for Elementor <= 1.0.4 versions.