Threats tagged 'ghsa-wr7p-6rrg-8m28'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.3	EPSS 0.4%	CVE-2026-90769lfnovo open-notebook · Server-Side Request Forgery (SSRF) High8.3EPSS 0.4%2026-09-13CVE Database V5CVE-2026-90769 Open Notebook before 1.11.0 fails to validate the URL parameter in POST /api/sources endpoint, allowing authenticated users to perform server-side requests to internal services. Attackers can supply arbitrary URLs to read cloud metadata, internal network services, and localhost-bound services through the application server's direct HTTP requests. EPSS 0.4%Vulnerability #ghsa-wr7p-6rrg-8m28	CVE Database V5	2026-09-13

Page 1 of 1