Open WebUI: SSRF into internal services via unvalidated sub-resource requests in the Playwright web loader
CVE-2026-70479
## Summary With the Playwright web loader enabled, Open WebUI opens user-submitted URLs in a real browser and validates
#cwe-918
共收录 2023 条相关情报。
← 返回所有主题NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an...
CVE-2026-47617
NVIDIA Dynamo for Linux contains a vulnerability in the multimodal media fetcher where an attacker may cause server-side
NVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an...
CVE-2026-47618
NVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal media fetcher where an attacker could cause serv
Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized...
CVE-2026-66325
Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofin
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability...
CVE-2026-48331
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in priv
Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-66325
CVE-2026-66325 是微软基于 Chromium 的 Edge 浏览器中存在的一个服务器端请求伪造（SSRF）漏洞。该漏洞允许未经授权的攻击者通过网络对目标系统实施欺骗攻击。根据 NVD 提供的描述，攻击者可以在无需身份验证的情况
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not req...
CVE-2026-48331
Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in priv
Shlink contains a server-side request forgery vulnerability that allows authenticated API key...
CVE-2026-18736
Shlink contains a server-side request forgery vulnerability that allows authenticated API key holders to cause the serve
A security vulnerability has been detected in jina-ai reader up to...
CVE-2026-18647
A security vulnerability has been detected in jina-ai reader up to 1574bfd380d249c86c82db4dace0d9c8fe17e2b1. This issue
Guzzle is an extensible PHP HTTP client. Prior to 7.15.2 and 8.0.1, Guzzle gives a transport the request URI as text and supplies the Host header separately. The cURL handlers s...
CVE-2026-69246
Guzzle is an extensible PHP HTTP client. Prior to 7.15.2 and 8.0.1, Guzzle gives a transport the request URI as text and
Shlink contains a server-side request forgery vulnerability that allows authenticated API key holders to cause the server to issue arbitrary HTTP GET requests by supplying a cra...
CVE-2026-18736
Shlink contains a server-side request forgery vulnerability that allows authenticated API key holders to cause the serve
A security vulnerability has been detected in jina-ai reader up to 1574bfd380d249c86c82db4dace0d9c8fe17e2b1. This issue affects the function isValidTLD of the file /backend/func...
CVE-2026-18647
A security vulnerability has been detected in jina-ai reader up to 1574bfd380d249c86c82db4dace0d9c8fe17e2b1. This issue
Guzzle: Noncanonical host can bypass host-based checks
CVE-2026-69246
### Impact In affected versions, Guzzle gives a transport the request URI as text and supplies the `Host` header separa
ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.1.1 until 10.2.2, every special-use classification method is built on isInSub...
CVE-2026-69198
ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.1.1 until 10.2.2, ev
ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.3.1, Address4 accepts an octet written with a leading zero and decodes it...
CVE-2026-69192
ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.3.1, Address4 ac
ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass
CVE-2026-69192
### Summary `Address4` accepts an octet written with a leading zero and decodes it as decimal, while the WHATWG URL hos
ip-address: a CIDR suffix on the parsed address suppresses special-use classification and can bypass SSRF and trust-boundary checks
CVE-2026-69198
### Summary Every special-use classification method is built on `isInSubnet`, which short-circuits to `false` whenever
ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses can bypass SSRF and trust-boundary checks
CVE-2026-54272
### Summary `Address6`'s special-property checks misclassify IPv4-mapped (`::ffff:0:0/96`) and NAT64 well-known (`64:ff
CTI-Transmute is affected by a server-side request forgery vulnerability in the evaluation report PDF-generation functionality. User-controlled CTI content, including conversio...
CVE-2026-69078
CTI-Transmute is affected by a server-side request forgery vulnerability in the evaluation report PDF-generation functio
Budibase before 3.38.1 contains a server-side request forgery vulnerability in the REST...
CVE-2026-67311
Budibase before 3.38.1 contains a server-side request forgery vulnerability in the REST datasource integration that fail