Dify is an open-source LLM app development platform. Prior to 1.13.0, the /console/api/remote-files/upload endpoint in api/controllers/web/remote_files.py accepted an attacker-controlled URL without authentication and caused the Dify server to retrieve it. A remote attacker could use the endpoint to send requests to internal services or cloud metadata endpoints, potentially exposing sensitive data and using the server as a network pivot. This issue is fixed in version 1.13.0.
In MongoDB Controllers for Kubernetes, insufficient validation of Ops Manager backup configuration may allow a user who can modify an OpsManager custom resource to cause unintended administrative changes in Ops Manager. This affects deployments using Enterprise Ops Manager backup reconciliation.
CVE-2026-105743 is a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the docling-project's docling software. Versions from 2.91.0 up to but not including 2.132.0 are affected. The issue arises because the validate_url_safety function performs a single IPv4 lookup to validate a hostname but then allows the HTTP client to resolve and parse the original URL again, enabling DNS rebinding and mixed public/internal address records to bypass validation. Additionally, HTMLBackendOptions(render_page=True) permits HTTP and HTTPS requests without validating the resolved destination. Exploitation requires remote fetching to be enabled, and the response content is only exposed when decoded as an image or rendered passively in a page screenshot. The vulnerability is fixed in version 2.132.0.
A Server-Side Request Forgery (SSRF) vulnerability exists in the TryGhost Ghost content management system versions 1.18.0 through 6.26.0. This vulnerability affects the webhooks feature and allows staff users to make requests to internal hosts from the Ghost server. The issue is resolved in version 6.27.0.
A validation issue in TryGhost Ghost versions 6.0.9 through 6.64.0 allowed unauthenticated users to abuse certain functionality, such as Webmentions, to make limited HTTP requests to hosts within the Ghost server's internal network on some network configurations. The attack does not return response data. The vulnerability is fixed in version 6.65.0.
A time-of-check to time-of-use (TOCTOU) race condition vulnerability in TryGhost Ghost versions 6.54.1 through 6.64.0 allows unauthenticated users to abuse certain functionality, such as Webmentions, to make limited HTTP requests to hosts within the Ghost server's internal network. The attack does not return response data. The issue is fixed in version 6.65.0.
Joomla Extension - svenbluege.de - Server-side request forgery in the Google Photos picker in Event Gallery extension < 6.6.0 - The Google Photos picker of the back-end upload page fetches the thumbnails of the picked images through the server, with the OAuth access token of the Google Photos account. The task took the address to fetch from the request without checking it and asked for no form token. A prepared page on another web site could therefore make the server send the access token of the account to any address, or fetch addresses inside the server's network, in the name of a logged in administrator; a back-end user with the permission "Manage" could do the same directly. The token is valid for about an hour and reaches what the picker session of the account reaches.
CVE-2026-105636 is a critical Server-Side Request Forgery (SSRF) vulnerability in the open-source project management tool Plane prior to version 1.4.0. The vulnerability arises because the webhook delivery task follows HTTP redirects without validating the final redirect target URL. Although the original webhook URL is checked to block private and reserved addresses, the redirected URL is not validated. This allows an attacker who can create a workspace to register a webhook that redirects to internal addresses, enabling the Plane worker to access internal resources such as cloud metadata. The response from these internal requests is stored in webhook logs, which the attacker can then retrieve via the webhook-logs API. This issue is fixed in Plane version 1.4.0.
Plane, an open-source project management tool, had a Server-Side Request Forgery (SSRF) vulnerability in versions prior to 1.4.0. The issue occurred in the OAuth avatar synchronization flow, where the application fetched avatar URLs from provider user data without validating internal IP addresses and followed redirects by default. This allowed attackers to supply avatar URLs that redirected to internal-only resources, such as metadata endpoints. The fetched content was then uploaded as a user avatar and exposed via a public API endpoint, enabling exfiltration of internal data. The vulnerability is fixed in version 1.4.0.
Plane is an open-source project management tool. Prior to 1.4.0, the fix for CVE-2026-27706 and GHSA-jcc6-f9v6-f7jw, an SSRF in work-item link unfurling shipped in v1.2.2, remains incomplete in the v1.3.1 GA release. Any authenticated project member can make the server fetch attacker-selected internal targets, including cloud metadata at 169.254.169.254, and read the response body returned as the link title or favicon. Complete hardening exists on main in PR 9163 but was not included in an earlier released tag. This issue is fixed in 1.4.0.
Plane, an open-source project management tool, has a Server-Side Request Forgery (SSRF) vulnerability identified as CVE-2026-104976. Versions prior to 1.4.0 do not properly validate the GITEA_HOST URL, allowing requests to internal or private IP addresses during the Gitea OAuth flow. Additionally, avatar URLs from Gitea user profiles are not validated, enabling an attacker to cause Plane to fetch internal resources. This vulnerability is fixed in version 1.4.0.
Plane, an open-source project management tool, has a Server-Side Request Forgery (SSRF) vulnerability identified as CVE-2026-104973. The issue exists in versions prior to 1.4.0 where webhook IP address validation is incomplete, allowing DNS rebinding to bypass SSRF protections. This vulnerability is fixed in version 1.4.0.
auto-changelog versions before 2.6.1 merge configuration from inside the target repository, including untrusted files, into their options. This allows execution of attacker-controlled code via the handlebarsSetup option, loading malicious modules via plugins, git argument injection, arbitrary file writes, and outbound requests to attacker-chosen URLs. Version 2.6.1 mitigates this by treating in-repository configuration as untrusted and refusing to run if unsafe options are set unless overridden by a specific flag.
Eclipse Che versions 7.29.0 and later contain a vulnerability in the GET /api/scm/resolve and POST /api/factory/resolver endpoints that allows authenticated users to supply attacker-controlled URLs to a fetch function without proper scheme or host validation. This enables reading arbitrary local files, accessing internal HTTP services and cloud metadata endpoints, and forwarding stored SCM personal access tokens to attacker-controlled hosts. The vulnerability also allows exfiltration of SCM personal access tokens via malicious devfiles. No fix is currently available.
CVE-2026-92931 is a high-severity Server-Side Request Forgery (SSRF) vulnerability in the Progress @progress/sitefinity-nextjs-sdk npm package versions 15.1.8326 through 15.4.8637. This flaw allows a remote attacker to make server-side requests to attacker-controlled hosts, which could lead to exposure of sensitive information and impact confidentiality, integrity, and availability of the affected system.
CVE-2026-63269 is a server-side request forgery (SSRF) vulnerability in LibreOffice version 26.2. The issue arises when LibreOffice links to audio and video files, specifically on Linux where it uses GStreamer to play media. An attacker could craft an HLS playlist that causes GStreamer to read local and remote files listed in the playlist during document loading, potentially exposing their contents. The vulnerability has been addressed in fixed versions by preventing LibreOffice from following playlists that reference further resources and by placing linked media under link update control.
CVE-2026-63267 is a server-side request forgery (SSRF) vulnerability in LibreOffice Calc version 26.2. It allows a document to link a cell range to an external CSV data source, which is fetched when the document loads. This behavior could enable reading local files into the spreadsheet or making requests to arbitrary hosts chosen by the document. The vulnerability is addressed in fixed versions where external data links are updated under the same control as other spreadsheet links.
CVE-2026-103958 is a server-side request forgery (SSRF) vulnerability in AWS Loom versions before 1.7.0. It affects the tool server and remote agent connection handling, allowing an authenticated remote user to potentially obtain the application's container role credentials and read responses from arbitrary internal network locations. The vulnerability is fixed in version 1.7.0 and later.
CVE-2026-103957 is a server-side request forgery (SSRF) vulnerability in AWS Loom versions before 1.7.0. It affects the OAuth2 discovery handling, allowing an authenticated remote user to obtain another user's access token and make the application send requests to arbitrary internal network locations. The issue is fixed in version 1.7.0 and later.