PhpWeasyPrint is a PHP library allowing PDF generation from a URL or an HTML page. Prior to version 2.6.0, `pontedilana/php-weasyprint` fetches the content of option values serv...

CVE-2026-49359

PhpWeasyPrint is a PHP library allowing PDF generation from a URL or an HTML page. Prior to version 2.6.0, `pontedilana/

历史摘要 · 未重新核验 · NVD

The Advanced Import plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.4.6. This is due to the plugin using wp_remote_get(...

CVE-2026-4328

The Advanced Import plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and includi

历史摘要 · 未重新核验 · NVD

The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up ...

CVE-2026-11989

The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vuln

历史摘要 · 未重新核验 · NVD

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, the terminal-server reverse proxy in `backend/open_webui/route...

CVE-2026-54017

Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Prior to 0.9.6, the t

历史摘要 · 未重新核验 · NVD

Signal K Server: Server-Side Request Forgery via Remote Connection Endpoints

CVE-2026-55591

### Summary signalk-server versions up to and including 2.27.0 contain a Server-Side Request Forgery (SSRF) vulnerabilit

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw: Hostname checks could treat trailing-dot hosts inconsistently

CVE-2026-53859

### Summary Hostname checks could treat trailing-dot hosts inconsistently. In affected versions, a request path that ac

历史摘要 · 未重新核验 · GitHub Advisory

Crawl4AI: Unauthenticated SSRF on the Docker server streaming crawl path (/crawl/stream)

### Summary The Docker API server applied its SSRF destination check (`validate_url_destination`) on the non-streaming

历史摘要 · 未重新核验 · GitHub Advisory

GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.26.4 and 2.27.3, a GeoServer that uses `ENTITY_RESOLUTION_ALLOWLIST` ...

CVE-2025-58175

GeoServer is an open source server that allows users to share and edit geospatial data. Prior to versions 2.26.4 and 2.2

历史摘要 · 未重新核验 · NVD

The CF7 to Webhook plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 5.0.0 via the pull_the_trigger. This makes it possible...

CVE-2026-11395

The CF7 to Webhook plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and includin

历史摘要 · 未重新核验 · NVD

TypeBot is a chatbot builder tool. In versions prior to 3.17.2, SSRF validation is implemented by resolving a hostname once and checking whether the resolved IP belongs to a for...

CVE-2026-48764

TypeBot is a chatbot builder tool. In versions prior to 3.17.2, SSRF validation is implemented by resolving a hostname o

历史摘要 · 未重新核验 · NVD

The docker_pull module uses the realm parameter from a Docker registry's WWW-Authenticate response header as the authentication endpoint without validation. An attacker in a man...

CVE-2026-12566

The docker_pull module uses the realm parameter from a Docker registry's WWW-Authenticate response header as the authent

历史摘要 · 未重新核验 · NVD

Open WebUI: SSRF Protection Bypass in Playwright Web Loader via HTTP Redirects

CVE-2026-54018

### Summary The SafePlaywrightURLLoader implements a validate_url function to prevent SSRF attacks by checking the IP ad

历史摘要 · 未重新核验 · GitHub Advisory

Open WebUI: Path traversal / SSRF in terminal server proxy via encoded path traversal

CVE-2026-54017

### Summary The terminal-server reverse proxy in `backend/open_webui/routers/terminals.py` does not fully confine the u

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw before 2026.5.26 contains a hostname validation vulnerability allowing attackers to...

CVE-2026-53859

OpenClaw before 2026.5.26 contains a hostname validation vulnerability allowing attackers to bypass blocklist comparison

历史摘要 · 未重新核验 · GitHub Advisory

OpenClaw before 2026.5.26 contains a hostname validation vulnerability allowing attackers to bypass blocklist comparisons using trailing-dot notation in model or workspace-deriv...

CVE-2026-53859

OpenClaw before 2026.5.26 contains a hostname validation vulnerability allowing attackers to bypass blocklist comparison

历史摘要 · 未重新核验 · NVD

Sync-in Server is a secure, open-source platform for file storage, sharing, collaboration, and syncing. Prior to version 2.3.0, the private IP blocklist regex used in the URL do...

CVE-2026-47684

Sync-in Server is a secure, open-source platform for file storage, sharing, collaboration, and syncing. Prior to version

历史摘要 · 未重新核验 · NVD

Administrator Server Side Request Forgery (SSRF) in PopAd <= 1.0.4 versions.

CVE-2025-60175

Administrator Server Side Request Forgery (SSRF) in PopAd <= 1.0.4 versions.

历史摘要 · 未重新核验 · NVD

An authenticated Server-Side Request Forgery (SSRF) in the custom scraper subsystem component of Benjamin Jonard Koillection v1.8.0 allows attackers to scan internal resources v...

CVE-2026-50888

An authenticated Server-Side Request Forgery (SSRF) in the custom scraper subsystem component of Benjamin Jonard Koillec

历史摘要 · 未重新核验 · NVD

A Server-Side Request Forgery (SSRF) in the automatic short URL title resolution component of shlink v5.0.1 allows attackers to scan internal resources via supplying a crafted l...

CVE-2026-50887

A Server-Side Request Forgery (SSRF) in the automatic short URL title resolution component of shlink v5.0.1 allows attac

历史摘要 · 未重新核验 · NVD

Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows

CVE-2026-48818

### Summary When serving static files on Windows, `StaticFiles` resolves the requested path with [`os.path.realpath`](h

历史摘要 · 未重新核验 · GitHub Advisory