Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: ssrf Clear
ID Title
CVE-2026-25960 SSRF (Server-Side Request Forgery) in vllm (CVE-2026-25960)
SSRF in vllm (CVE-2026-25960). Confidential information can be exposed externally. Exploitable via ``load_from_url_async``. Mitigation: upgrade to `0.17.0` or later.
CVE-2026-26338 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-26338)
SSRF in ssrf (CVE-2026-26338). Successful exploitation can lead to full system takeover.
CVE-2026-25870 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-25870)
SSRF in ssrf (CVE-2026-25870). Risk of unauthorized operations or information disclosure.
CVE-2025-11242 SSRF (Server-Side Request Forgery) in ssrf (CVE-2025-11242)
SSRF in ssrf (CVE-2025-11242). Successful exploitation can lead to full system takeover.
CVE-2026-25580 SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-25580)
SSRF in ssrf (CVE-2026-25580). Confidential information can be exposed externally. Mitigation: upgrade to `1.56.0` or later.
CVE-2026-1518 Vulnerability in ssrf (CVE-2026-1518)
vulnerability in ssrf (CVE-2026-1518). Risk of unauthorized operations or information disclosure.
CVE-2026-24779 SSRF (Server-Side Request Forgery) in vllm (CVE-2026-24779)
SSRF in vllm (CVE-2026-24779). Confidential information can be exposed externally. Exploitable via ``MediaConnector``. Mitigation: upgrade to `0.14.1` or later.
CVE-2025-56589 SSRF (Server-Side Request Forgery) in ssrf (CVE-2025-56589)
SSRF in ssrf (CVE-2025-56589). Confidential information can be exposed externally.
CVE-2026-22219 SSRF (Server-Side Request Forgery) in chainlit (CVE-2026-22219)
SSRF in chainlit (CVE-2026-22219). Confidential information can be exposed externally. Mitigation: upgrade to `2.9.4` or later.
CVE-2025-68616 Open Redirect in weasyprint (CVE-2025-68616)
vulnerability in weasyprint (CVE-2025-68616). Confidential information can be exposed externally. Exploitable via ``default_url_fetcher``. Mitigation: upgrade to `68.0` or later.
CVE-2025-34452 Path Traversal in ssrf (CVE-2025-34452)
path traversal in ssrf (CVE-2025-34452). Risk of unauthorized operations or information disclosure.
CVE-2025-60898 SSRF (Server-Side Request Forgery) in c (CVE-2025-60898)
SSRF in c (CVE-2025-60898). Risk of unauthorized operations or information disclosure.
CVE-2025-34282 SSRF (Server-Side Request Forgery) in ssrf (CVE-2025-34282)
SSRF in ssrf (CVE-2025-34282). Confidential information can be exposed externally.
CVE-2020-36851 SSRF (Server-Side Request Forgery) in ssrf (CVE-2020-36851)
SSRF in ssrf (CVE-2020-36851). Risk of unauthorized operations or information disclosure.
CVE-2025-5260 SSRF (Server-Side Request Forgery) in ssrf (CVE-2025-5260)
SSRF in ssrf (CVE-2025-5260). Confidential information can be exposed externally.
CVE-2025-51058 SSRF (Server-Side Request Forgery) in ssrf (CVE-2025-51058)
SSRF in ssrf (CVE-2025-51058). Confidential information can be exposed externally.
CVE-2024-55399 SSRF (Server-Side Request Forgery) in ssrf (CVE-2024-55399)
SSRF in ssrf (CVE-2024-55399). Risk of unauthorized operations or information disclosure.
CVE-2025-45939 SSRF (Server-Side Request Forgery) in ssrf (CVE-2025-45939)
SSRF in ssrf (CVE-2025-45939). Risk of unauthorized operations or information disclosure.
CVE-2025-52163 SSRF (Server-Side Request Forgery) in ssrf (CVE-2025-52163)
SSRF in ssrf (CVE-2025-52163). Risk of unauthorized operations or information disclosure.
CVE-2025-51591 SSRF (Server-Side Request Forgery) in ssrf (CVE-2025-51591)
SSRF in ssrf (CVE-2025-51591). Risk of unauthorized operations or information disclosure.
CVE-2025-5276 SSRF (Server-Side Request Forgery) in ssrf (CVE-2025-5276)
SSRF in ssrf (CVE-2025-5276). Confidential information can be exposed externally.
CVE-2025-25827 SSRF (Server-Side Request Forgery) in ssrf (CVE-2025-25827)
SSRF in ssrf (CVE-2025-25827). Confidential information can be exposed externally.
CVE-2025-25785 SSRF (Server-Side Request Forgery) in c (CVE-2025-25785)
SSRF in c (CVE-2025-25785). Confidential information can be exposed externally.
CVE-2025-0474 SSRF (Server-Side Request Forgery) in ssrf (CVE-2025-0474)
SSRF in ssrf (CVE-2025-0474). Confidential information can be exposed externally.
CVE-2024-55875 Information Disclosure in org.http4k:http4k-format-xml (CVE-2024-55875)
vulnerability in org.http4k:http4k-format-xml (CVE-2024-55875). Successful exploitation can lead to full system takeover. Exploitable via ``DocumentBuilderFactory``. Mitigation: upgrade to `6.50.0.0` or later.
CVE-2024-42467 SSRF (Server-Side Request Forgery) in org.openhab.ui.bundles:org.openhab.ui.cometvisu (CVE-2024-42467)
SSRF in org.openhab.ui.bundles:org.openhab.ui.cometvisu (CVE-2024-42467). Confidential information can be exposed externally. Mitigation: upgrade to `4.2.1` or later.
CVE-2024-21527 SSRF (Server-Side Request Forgery) in ssrf (CVE-2024-21527)
SSRF in ssrf (CVE-2024-21527). Confidential information can be exposed externally.
CVE-2024-25294 SSRF (Server-Side Request Forgery) in ssrf (CVE-2024-25294)
SSRF in ssrf (CVE-2024-25294). Confidential information can be exposed externally.
CVE-2024-22873 SSRF (Server-Side Request Forgery) in ssrf (CVE-2024-22873)
SSRF in ssrf (CVE-2024-22873). Confidential information can be exposed externally.
CVE-2023-36088 SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-36088)
SSRF in ssrf (CVE-2023-36088). Confidential information can be exposed externally.
CVE-2023-35175 SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-35175)
SSRF in ssrf (CVE-2023-35175). Successful exploitation can lead to full system takeover.
CVE-2023-27162 SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-27162)
SSRF in ssrf (CVE-2023-27162). Confidential information can be exposed externally.
CVE-2023-27163 SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-27163)
SSRF in ssrf (CVE-2023-27163). Confidential information can be exposed externally.
CVE-2023-27159 SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-27159)
SSRF in ssrf (CVE-2023-27159). Confidential information can be exposed externally.
CVE-2023-27160 SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-27160)
SSRF in ssrf (CVE-2023-27160). Successful exploitation can lead to full system takeover.
CVE-2023-1725 SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-1725)
SSRF in ssrf (CVE-2023-1725). Successful exploitation can lead to full system takeover.
CVE-2023-25262 SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-25262)
SSRF in ssrf (CVE-2023-25262). Confidential information can be exposed externally.
CVE-2023-27161 SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-27161)
SSRF in ssrf (CVE-2023-27161). Confidential information can be exposed externally.
CVE-2022-45085 SSRF (Server-Side Request Forgery) in ssrf (CVE-2022-45085)
SSRF in ssrf (CVE-2022-45085). Confidential information can be exposed externally.
CVE-2021-37498 SSRF (Server-Side Request Forgery) in ssrf (CVE-2021-37498)
SSRF in ssrf (CVE-2021-37498). Risk of unauthorized operations or information disclosure.
CVE-2022-42343 SSRF (Server-Side Request Forgery) in ssrf (CVE-2022-42343)
SSRF in ssrf (CVE-2022-42343). Confidential information can be exposed externally.
CVE-2022-40842 SSRF (Server-Side Request Forgery) in ssrf (CVE-2022-40842)
SSRF in ssrf (CVE-2022-40842). Confidential information can be exposed externally.
CVE-2022-38580 Zalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF).
Zalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF).
CVE-2022-36551 SSRF (Server-Side Request Forgery) in label-studio (CVE-2022-36551)
SSRF in label-studio (CVE-2022-36551). Confidential information can be exposed externally. Mitigation: upgrade to `1.5.0.post0` or later.
CVE-2021-21009 SSRF (Server-Side Request Forgery) in ssrf (CVE-2021-21009)
SSRF in ssrf (CVE-2021-21009). Confidential information can be exposed externally.
CVE-2020-24815 SSRF (Server-Side Request Forgery) in ssrf (CVE-2020-24815)
SSRF in ssrf (CVE-2020-24815). Confidential information can be exposed externally.
CVE-2020-28043 SSRF (Server-Side Request Forgery) in ssrf (CVE-2020-28043)
SSRF in ssrf (CVE-2020-28043). Confidential information can be exposed externally.
CVE-2020-24881 SSRF (Server-Side Request Forgery) in ssrf (CVE-2020-24881)
SSRF in ssrf (CVE-2020-24881). Successful exploitation can lead to full system takeover.
CVE-2020-25466 SSRF (Server-Side Request Forgery) in ssrf (CVE-2020-25466)
SSRF in ssrf (CVE-2020-25466). Successful exploitation can lead to full system takeover.
CVE-2020-22983 SSRF (Server-Side Request Forgery) in ssrf (CVE-2020-22983)
SSRF in ssrf (CVE-2020-22983). Confidential information can be exposed externally.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →