OpenAM before 16.1.3 contains a server-side request forgery vulnerability that allows attackers able to register or modify OAuth 2.0 clients to make OpenAM fetch internal resour...

CVE-2026-105122

CVE-2026-105122 是 OpenAM（ForgeRock 系身份与访问管理平台）16.1.3 之前版本中存在的一个服务端请求伪造（SSRF）漏洞。其根因在于 OpenAM 在处理 OAuth 2.0 / OpenID Conne

历史摘要 · 未重新核验 · NVD

OpenAM before 16.1.3 SSRF via OpenID Connect Client jwks_uri

CVE-2026-105122

OpenAM before 16.1.3 contains a server-side request forgery vulnerability that allows attackers able to register or modi

历史摘要 · 未重新核验 · OSV.dev

SiYuan Agent Tools SSRF via DNS-Rebinding TOCTOU (Bypass of CheckHostSSRF)

# Security Advisory — SiYuan Agent Tools SSRF via DNS-Rebinding TOCTOU (Bypass of `CheckHostSSRF`) | Field | Value | |-

历史摘要 · 未重新核验 · GitHub Advisory

SiYuan: Cross-Site WebSocket Hijacking on the admin-only network proxy endpoint (`/ws/network/proxy`) via explicit `CheckOrigin: true` bypass

CVE-2026-74802

**High** ## Package gomod `github.com/siyuan-note/siyuan/kernel` ## Affected versions 3.7.3 ## Patched versions *(non

历史摘要 · 未重新核验 · GitHub Advisory

Vibe-Trading LLM-callable tools permit command execution, code injection, and SSRF

### Summary: 5 findings — `BashTool` shell-injection sink (F6, the canonical RCE primitive), `BackgroundRunTool` async

历史摘要 · 未重新核验 · GitHub Advisory

Trigger.dev: Blind SSRF via alert-channel webhook

### Summary A WEBHOOK alert channel stores a user-supplied `url`. When an alert fires (deployment/run failure, error gr

历史摘要 · 未重新核验 · GitHub Advisory

UTMStack before 11.2.16 contains a server-side request forgery vulnerability that allows...

CVE-2026-82044

UTMStack before 11.2.16 contains a server-side request forgery vulnerability that allows authenticated attackers to make

历史摘要 · 未重新核验 · GitHub Advisory

UTMStack before 11.2.16 contains a server-side request forgery vulnerability in...

CVE-2026-82040

UTMStack before 11.2.16 contains a server-side request forgery vulnerability in IdentityProviderService.validateMetadata

历史摘要 · 未重新核验 · GitHub Advisory

Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote...

CVE-2020-37278

Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arb

历史摘要 · 未重新核验 · GitHub Advisory

UTMStack before 11.2.16 contains a server-side request forgery vulnerability that allows authenticated attackers to make the server request arbitrary internal resources by suppl...

CVE-2026-82044

UTMStack before 11.2.16 contains a server-side request forgery vulnerability that allows authenticated attackers to make

历史摘要 · 未重新核验 · NVD

UTMStack before 11.2.16 contains a server-side request forgery vulnerability in IdentityProviderService.validateMetadataUrl() that allows authenticated attackers to make the ser...

CVE-2026-82040

UTMStack before 11.2.16 contains a server-side request forgery vulnerability in IdentityProviderService.validateMetadata

历史摘要 · 未重新核验 · NVD

Trigger.dev: Server-side request forgery via unvalidated webhook alert-channel URL

### Summary A project member can create a webhook alert channel whose delivery URL points at an internal address, and tr

历史摘要 · 未重新核验 · GitHub Advisory

Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the credentia...

CVE-2026-103958

Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS before 1.7.0 might a

历史摘要 · 未重新核验 · NVD

Server-side request forgery in the OAuth2 discovery handling in Loom for AWS before 1.7.0 might allow an authenticated remote user to obtain the access token of another user of ...

CVE-2026-103957

Server-side request forgery in the OAuth2 discovery handling in Loom for AWS before 1.7.0 might allow an authenticated r

历史摘要 · 未重新核验 · NVD

Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arbitrary files on the host system by supplying a file: URL ...

CVE-2020-37278

Weaver e-Bridge contains an unauthenticated arbitrary file read vulnerability that allows remote attackers to access arb

历史摘要 · 未重新核验 · NVD

Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS

CVE-2026-103958

Server-side request forgery in the tool server and remote agent connection handling in Loom for AWS before 1.7.0 might a

历史摘要 · 未重新核验 · OSV.dev

Server-side request forgery in the OAuth2 discovery handling in Loom for AWS

CVE-2026-103957

Server-side request forgery in the OAuth2 discovery handling in Loom for AWS before 1.7.0 might allow an authenticated r

历史摘要 · 未重新核验 · OSV.dev

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, Image Optimization can follow attacker-controlled DNS resolution for a remote UR...

CVE-2026-94483

Next.js is a React framework for building full-stack web applications. From 16.0.0 until 16.3.8, Image Optimization can

历史摘要 · 未重新核验 · NVD

Server-Side Request Forgery (SSRF) vulnerability in ThemeREX Group ThemeREX Addons trx_addons allows Server Side Request Forgery.This issue affects ThemeREX Addons: from n/a thr...

CVE-2026-102797

Server-Side Request Forgery (SSRF) vulnerability in ThemeREX Group ThemeREX Addons trx_addons allows Server Side Request

历史摘要 · 未重新核验 · NVD

YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make server-side GET requests by supplying an unvalidated acto...

CVE-2026-104464

YesWiki before 4.6.7 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make

历史摘要 · 未重新核验 · NVD