Threats tagged 'brew-keeper-commander-cve-2026-114609'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.8	EPSS 0.3%	CVE-2026-114609Keeper commander: fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled Medium5.8EPSS 0.3%2026-10-29GCVE DatabaseCVE-2026-114609 The fpdf2 library implicitly dereferences image resource references supplied to its rendering APIs, which can cause outbound HTTP(S) requests or local file access attempts when processing untrusted input. This behavior affects applications that render untrusted HTML, SVG, or template data containing image paths or URLs. The vulnerability may enable Server-Side Request Forgery (SSRF) and limited local file access depending on the image resource validity. The issue affects keeper-commander versions from 17.0.21 up to but not including 18.1.1 and is fixed in version 18.1.1. EPSS 0.3%Report on CVE-2026-114609 Vulnerability #brew-keeper-commander-cve-2026-114609 #homebrew	GCVE Database	2026-10-29

Page 1 of 1