Threats tagged 'ghsa-5mx2-758c-cg2x'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.5	EPSS 0.3%	CVE-2026-71280shiori · Server-Side Request Forgery High8.5EPSS 0.3%2026-08-05CVE Database V5CVE-2026-71280 go-shiori's DownloadBookmark (internal/core/download.go) fetches a caller-supplied bookmark URL using a plain http.Client with no custom DialContext or destination-IP validation (no IsLoopback, IsPrivate, IsUnspecified, or IsLinkLocalUnicast checks). EPSS 0.3%Vulnerability go-shiori CWE-918 #ghsa-5mx2-758c-cg2x	CVE Database V5	2026-08-05

Page 1 of 1