Summary
Astro: Host header SSRF in prerendered error page fetch
References
Related vulnerabilities
All Supply chain →- MEDIUMGHSA-X4R9-GMW3-HXWW
GeoServer has a Server-Side Request Forgery (SSRF) Vulnerability in its XML Entity Resolution
- HIGHGHSA-JRFP-M64G-PCWV
Open WebUI: SSRF Protection Bypass in Playwright Web Loader via HTTP Redirects
- HIGHGHSA-R2WG-2MCR-66RV
Open WebUI: Path traversal / SSRF in terminal server proxy via encoded path traversal
- HIGHGHSA-226F-F24G-524W
Open WebUI: Redirect-Bypass SSRF in OAuth `_process_picture_url` (incomplete-fix sibling of CVE-2026-45401)
- MEDIUMGHSA-HMCR-RMJQ-47QR
NocoDB: Server-Side Request Forgery via Spreadsheet Import Endpoint
- MEDIUMGHSA-H6VV-PCQ8-7XM4
NocoDB: Server-Side Request Forgery via Base Migration URL