IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side request forgery (SSRF) with the Ajax Proxy configured. This may allow an attacker to send unauthorized...

CVE-2026-9006

IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side request forgery (SSRF) with the Ajax Proxy co

历史摘要 · 未重新核验 · NVD

IBM Watson Speech Services Cartridge is vulnerable to Server-Side Request Forgery (SSRF) in Sterling File Gateway, due to a flaw which may allow an authenticated attacker to sen...

CVE-2026-7253

IBM Watson Speech Services Cartridge is vulnerable to Server-Side Request Forgery (SSRF) in Sterling File Gateway, due t

历史摘要 · 未重新核验 · NVD

A vulnerability was detected in activepieces up to 0.83.0. This vulnerability affects the...

CVE-2026-12813

A vulnerability was detected in activepieces up to 0.83.0. This vulnerability affects the function handleUrlFile in the

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was detected in activepieces up to 0.83.0. This vulnerability affects the function handleUrlFile in the library packages/server/engine/src/lib/variables/processo...

CVE-2026-12813

A vulnerability was detected in activepieces up to 0.83.0. This vulnerability affects the function handleUrlFile in the

历史摘要 · 未重新核验 · NVD

A weakness has been identified in BerriAI litellm up to 1.82.2. Affected by this vulnerability is...

CVE-2026-12798

A weakness has been identified in BerriAI litellm up to 1.82.2. Affected by this vulnerability is the function load_open

历史摘要 · 未重新核验 · GitHub Advisory

A weakness has been identified in BerriAI litellm up to 1.82.2. Affected by this vulnerability is the function load_openapi_spec_async of the file litellm/proxy/_experimental/mc...

CVE-2026-12798

A weakness has been identified in BerriAI litellm up to 1.82.2. Affected by this vulnerability is the function load_open

历史摘要 · 未重新核验 · NVD

A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this...

CVE-2026-12774

A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this vulnerability is the functi

历史摘要 · 未重新核验 · GitHub Advisory

A security vulnerability has been detected in BerriAI litellm up to 1.82.2. Affected by this vulnerability is the function _execute_with_mcp_client of the file litellm/proxy/_ex...

CVE-2026-12774

CVE-2026-12774 是 BerriAI litellm 至 1.82.2 版本中的一个服务器端请求伪造（SSRF）漏洞。漏洞位于 litellm/proxy/_experimental/mcp_server/rest_endpoi

历史摘要 · 未重新核验 · NVD

AVideo through version 27.0 contains a server-side request forgery vulnerability in plugin/Live...

CVE-2026-56342

AVideo through version 27.0 contains a server-side request forgery vulnerability in plugin/Live/test.php that allows aut

历史摘要 · 未重新核验 · GitHub Advisory

AVideo through version 27.0 contains a server-side request forgery vulnerability in plugin/Live/test.php that allows authenticated administrators to read arbitrary URLs via the ...

CVE-2026-56342

CVE-2026-56342 是 AVideo 内容管理系统（版本 27.0 及之前）中存在的一个服务器端请求伪造（SSRF）漏洞。漏洞位于 plugin/Live/test.php 文件中，参数 statsURL 未经过 isSSRFSa

历史摘要 · 未重新核验 · NVD

Capgo before 12.128.2 contains a server-side request forgery vulnerability in webhook URL...

CVE-2026-56227

Capgo before 12.128.2 contains a server-side request forgery vulnerability in webhook URL validation that allows loopbac

历史摘要 · 未重新核验 · GitHub Advisory

Capgo before 12.128.2 contains a server-side request forgery vulnerability in webhook URL validation that allows loopback and internal addresses. Organization admins can configu...

CVE-2026-56227

Capgo before 12.128.2 contains a server-side request forgery vulnerability in webhook URL validation that allows loopbac

历史摘要 · 未重新核验 · NVD

SurrealDB: SSRF via JWKS URL — Redirect Following in JWT Key Fetch

SurrealDB fetches the JWKS document for a JWT or record access method using a bare `reqwest` client that follows HTTP re

历史摘要 · 未重新核验 · GitHub Advisory

Lokka: Azure Resource Manager URL path validation issue

Lokka versions prior to 2.1.2 constructed Azure Resource Manager request URLs using direct string concatenation with use

历史摘要 · 未重新核验 · GitHub Advisory

Zeep: Server-Side Request Forgery (SSRF)

## Summary When parsing a WSDL or XSD document, python-zeep follows transitive references — xsd:import, xsd:include, ws

历史摘要 · 未重新核验 · GitHub Advisory

SearXNG MCP Server: DNS-resolved Private Hostname SSRF in `web_url_read`

## DNS-resolved Private Hostname SSRF in `web_url_read` ### Summary The `web_url_read` MCP tool in `mcp-searxng` is vu

历史摘要 · 未重新核验 · GitHub Advisory

A flaw was found in the AWX GitHub webhook integration. When processing GitHub pull_request...

CVE-2026-12726

A flaw was found in the AWX GitHub webhook integration. When processing GitHub pull_request webhooks, the controller sto

历史摘要 · 未重新核验 · GitHub Advisory

Mailpit: Incomplete SSRF protection in Link Check API via IPv6 transition mechanisms

CVE-2026-55187

## Summary The remediation shipped in mailpit v1.29.2 for [GHSA-mpf7-p9x7-96r3](https://github.com/axllent/mailpit/secu

历史摘要 · 未重新核验 · GitHub Advisory

Mercator is an open source web application that enables mapping of the information system. Prior to version 2025.05.19, a Server-Side Request Forgery (SSRF) vulnerability exists...

CVE-2026-49345

Mercator is an open source web application that enables mapping of the information system. Prior to version 2025.05.19,

历史摘要 · 未重新核验 · NVD

A flaw was found in the AWX GitHub webhook integration. When processing GitHub pull_request webhooks, the controller stores the pull_request.statuses_url value from the webhook ...

CVE-2026-12726

A flaw was found in the AWX GitHub webhook integration. When processing GitHub pull_request webhooks, the controller sto

历史摘要 · 未重新核验 · NVD