Threats affecting pkg:github/builder

CVE-2026-115720 is a server-side request forgery (SSRF) vulnerability in Frappe Builder versions before 1.36.1. The flaw exists in builder/api.py where the URL validation only checks the initial hostname but does not handle HTTP redirects properly, allowing attackers to redirect requests to internal or link-local addresses. An authenticated attacker can exploit this by calling the convert_to_webp endpoint, which lacks permission checks, to perform SSRF attacks, internal port scanning, or cause denial of service due to request hangs.

Frappe Builder versions before 1.36.1 have a server-side request forgery (SSRF) vulnerability in the convert_to_webp API endpoint. This endpoint lacks proper access control and performs unprotected HTTP requests that follow redirects without revalidating IP addresses. A low-privilege authenticated user can exploit this to make the server fetch internal network resources or cloud metadata endpoints. The fetched images are saved to a publicly accessible URL, enabling data exfiltration or internal network probing.

Frappe Builder versions 1.33.0 up to but not including 1.36.0 have a missing authorization vulnerability in the improve_prompt API endpoint. This flaw allows any authenticated user, except guests, to invoke large language model (LLM) completions without proper permission checks. Exploitation enables attackers to use the site owner's stored OpenRouter API key, consuming paid LLM credits and effectively turning the site into a free LLM proxy. The vulnerability is fixed in version 1.36.0.

A flaw was found in openshift/builder. This vulnerability allows command injection via path traversal, where a malicious user can execute arbitrary commands on the OpenShift node running the builder container. When using the “Docker” strategy, executable files inside the privileged build container can be overridden using the `spec.source.secrets.secret.destinationDir` attribute of the `BuildConfig` definition. An attacker running code in a privileged container could escalate their permissions on the node running the container.