stoatchat before 0.13.5 contains an unauthenticated server-side request forgery vulnerability in the /proxy and /embed endpoints that accept arbitrary URLs without DNS resolutio...

CVE-2026-63306

stoatchat before 0.13.5 contains an unauthenticated server-side request forgery vulnerability in the /proxy and /embed e

历史摘要 · 未重新核验 · NVD

stoatchat before 0.13.5 Unauthenticated SSRF via proxy and embed endpoints

CVE-2026-63306

stoatchat before 0.13.5 contains an unauthenticated server-side request forgery vulnerability in the /proxy and /embed e

历史摘要 · 未重新核验 · OSV.dev

ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation)

CVE-2026-58196

# Security Advisory: SSRF in remote MCP server authentication discovery **Severity:** High. **CWE:** CWE-918. **Affecte

历史摘要 · 未重新核验 · GitHub Advisory

Wekan is open source kanban built with Meteor. Prior to 9.32, Wekan webhook integration URLs in models/integrations.js are stored from user input and later fetched by server/not...

CVE-2026-53446

Wekan is open source kanban built with Meteor. Prior to 9.32, Wekan webhook integration URLs in models/integrations.js a

历史摘要 · 未重新核验 · NVD

TensorZero Gateway: Arbitrary file read and SSRF in internal object storage endpoint

CVE-2026-54457

### Impact The `/internal/object_storage` endpoint accepts a caller-supplied JSON `storage_path` parameter that dynamic

历史摘要 · 未重新核验 · GitHub Advisory

safeurl is Missing IPv6 CIDR Ranges in Blocklist

CVE-2026-54452

The `privateNetworks` blocklist was found to be missing newly added CIDR ranges. More specifically, the following CIDR r

历史摘要 · 未重新核验 · GitHub Advisory

ToolHive: SSRF guard misses IPv6 NAT64 ranges (64:ff9b::/96, 64:ff9b:1::/48), allowing metadata/internal access behind a NAT64 gateway

CVE-2026-54450

## Summary ToolHive's hand-rolled private/reserved-IP SSRF guard (`networking.IsPrivateIP` in `pkg/networking/utilities

历史摘要 · 未重新核验 · GitHub Advisory

9Router is an AI router & token saver. Prior to 0.5.6, the Kiro API-key validation endpoint POST /api/oauth/kiro/api-key builds an upstream URL using a user-controlled region va...

CVE-2026-56678

9Router is an AI router & token saver. Prior to 0.5.6, the Kiro API-key validation endpoint POST /api/oauth/kiro/api-key

历史摘要 · 未重新核验 · NVD

Wekan: Server-Side Request Forgery (SSRF) via webhook integration URLs

CVE-2026-53446

Wekan is open source kanban built with Meteor. Prior to 9.32, Wekan webhook integration URLs in models/integrations.js a

历史摘要 · 未重新核验 · OSV.dev

9Router: Kiro region injection allows authenticated SSRF with Authorization header forwarding

CVE-2026-56678

9Router is an AI router & token saver. Prior to 0.5.6, the Kiro API-key validation endpoint POST /api/oauth/kiro/api-key

历史摘要 · 未重新核验 · OSV.dev

Strands Agents is an open-source Python SDK for building and running AI agents. The strands-agents-tools package provides pre-built tools for use with the SDK, including the ela...

CVE-2026-15746

Strands Agents is an open-source Python SDK for building and running AI agents. The strands-agents-tools package provide

历史摘要 · 未重新核验 · NVD

Credential disclosure in Strands Agents Tools elasticsearch_memory tool

CVE-2026-15746

Strands Agents is an open-source Python SDK for building and running AI agents. The strands-agents-tools package provide

历史摘要 · 未重新核验 · OSV.dev

Koel: Full-read SSRF via podcast enclosure URL: isPublicHost() filter_var guard does not reject NAT64 (64:ff9b::/96) or 6to4 (2002::/16) IPv6-transition wrappers of internal IPv4

CVE-2026-54494

## Summary Koel's outbound-URL guard `App\Helpers\Network::isPublicHost()` classifies an IP as "public" using PHP's `fi

历史摘要 · 未重新核验 · GitHub Advisory

Koel: Server-Side Request Forgery (SSRF) in radio station creation due to missing validation bail

CVE-2026-50552

Summary Koel v9.5.0 contains a Server-Side Request Forgery (SSRF) vulnerability in the radio station creation endpoint

历史摘要 · 未重新核验 · GitHub Advisory

Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, the @better-auth/sso plugin's POST /sso/register and POST /sso/update-provider endpoi...

CVE-2026-53513

Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, the @better-auth/sso plugin'

历史摘要 · 未重新核验 · NVD

Koel: Incomplete fix for CVE-2026-47260 — systemic SSRF in podcast & radio fetch paths

CVE-2026-54491

### Summary The fix for **CVE-2026-47260** (v9.3.5) added an **initial** `isSafeUrl()` check to several fetchers (`sync

历史摘要 · 未重新核验 · GitHub Advisory

Koel has SSRF through Authenticated Subsonic podcast feed URLs

## Summary Koel's Subsonic `createPodcastChannel.view` endpoint accepts a user supplied podcast feed URL and fetches it

历史摘要 · 未重新核验 · GitHub Advisory

Better Auth: Server-side request forgery via unvalidated OIDC endpoints on @better-auth/sso provider registration

CVE-2026-53513

Better Auth is an authentication and authorization library for TypeScript. Prior to 1.6.11, the @better-auth/sso plugin'

历史摘要 · 未重新核验 · OSV.dev

Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.36.0, Vaultwarden's /icons/{domain}/icon.png endpoint used src/http_client.rs checks including should_bl...

CVE-2026-47160

Vaultwarden is a Bitwarden-compatible server written in Rust. Prior to 1.36.0, Vaultwarden's /icons/{domain}/icon.png en

历史摘要 · 未重新核验 · NVD

Penpot is an open-source design tool for design and code collaboration. Prior to 2.15.0, Penpot's remote image import passed the user-controlled url from frontend/src/app/main/d...

CVE-2026-45806

Penpot is an open-source design tool for design and code collaboration. Prior to 2.15.0, Penpot's remote image import pa

历史摘要 · 未重新核验 · NVD