Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2026-25960 |
|
SSRF (Server-Side Request Forgery) in vllm (CVE-2026-25960)
SSRF in vllm (CVE-2026-25960). Confidential information can be exposed externally. Exploitable via ``load_from_url_async``. Mitigation: upgrade to `0.17.0` or later.
|
| CVE-2026-26338 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-26338)
SSRF in ssrf (CVE-2026-26338). Successful exploitation can lead to full system takeover.
|
| CVE-2026-25870 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-25870)
SSRF in ssrf (CVE-2026-25870). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-11242 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2025-11242)
SSRF in ssrf (CVE-2025-11242). Successful exploitation can lead to full system takeover.
|
| CVE-2026-25580 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2026-25580)
SSRF in ssrf (CVE-2026-25580). Confidential information can be exposed externally. Mitigation: upgrade to `1.56.0` or later.
|
| CVE-2026-1518 |
|
Vulnerability in ssrf (CVE-2026-1518)
vulnerability in ssrf (CVE-2026-1518). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-24779 |
|
SSRF (Server-Side Request Forgery) in vllm (CVE-2026-24779)
SSRF in vllm (CVE-2026-24779). Confidential information can be exposed externally. Exploitable via ``MediaConnector``. Mitigation: upgrade to `0.14.1` or later.
|
| CVE-2025-56589 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2025-56589)
SSRF in ssrf (CVE-2025-56589). Confidential information can be exposed externally.
|
| CVE-2026-22219 |
|
SSRF (Server-Side Request Forgery) in chainlit (CVE-2026-22219)
SSRF in chainlit (CVE-2026-22219). Confidential information can be exposed externally. Mitigation: upgrade to `2.9.4` or later.
|
| CVE-2025-68616 |
|
Open Redirect in weasyprint (CVE-2025-68616)
vulnerability in weasyprint (CVE-2025-68616). Confidential information can be exposed externally. Exploitable via ``default_url_fetcher``. Mitigation: upgrade to `68.0` or later.
|
| CVE-2025-34452 |
|
Path Traversal in ssrf (CVE-2025-34452)
path traversal in ssrf (CVE-2025-34452). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-60898 |
|
SSRF (Server-Side Request Forgery) in c (CVE-2025-60898)
SSRF in c (CVE-2025-60898). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-34282 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2025-34282)
SSRF in ssrf (CVE-2025-34282). Confidential information can be exposed externally.
|
| CVE-2020-36851 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2020-36851)
SSRF in ssrf (CVE-2020-36851). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-5260 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2025-5260)
SSRF in ssrf (CVE-2025-5260). Confidential information can be exposed externally.
|
| CVE-2025-51058 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2025-51058)
SSRF in ssrf (CVE-2025-51058). Confidential information can be exposed externally.
|
| CVE-2024-55399 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2024-55399)
SSRF in ssrf (CVE-2024-55399). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-45939 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2025-45939)
SSRF in ssrf (CVE-2025-45939). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-52163 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2025-52163)
SSRF in ssrf (CVE-2025-52163). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-51591 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2025-51591)
SSRF in ssrf (CVE-2025-51591). Risk of unauthorized operations or information disclosure.
|
| CVE-2025-5276 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2025-5276)
SSRF in ssrf (CVE-2025-5276). Confidential information can be exposed externally.
|
| CVE-2025-25827 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2025-25827)
SSRF in ssrf (CVE-2025-25827). Confidential information can be exposed externally.
|
| CVE-2025-25785 |
|
SSRF (Server-Side Request Forgery) in c (CVE-2025-25785)
SSRF in c (CVE-2025-25785). Confidential information can be exposed externally.
|
| CVE-2025-0474 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2025-0474)
SSRF in ssrf (CVE-2025-0474). Confidential information can be exposed externally.
|
| CVE-2024-55875 |
|
Information Disclosure in org.http4k:http4k-format-xml (CVE-2024-55875)
vulnerability in org.http4k:http4k-format-xml (CVE-2024-55875). Successful exploitation can lead to full system takeover. Exploitable via ``DocumentBuilderFactory``. Mitigation: upgrade to `6.50.0.0` or later.
|
| CVE-2024-42467 |
|
SSRF (Server-Side Request Forgery) in org.openhab.ui.bundles:org.openhab.ui.cometvisu (CVE-2024-42467)
SSRF in org.openhab.ui.bundles:org.openhab.ui.cometvisu (CVE-2024-42467). Confidential information can be exposed externally. Mitigation: upgrade to `4.2.1` or later.
|
| CVE-2024-21527 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2024-21527)
SSRF in ssrf (CVE-2024-21527). Confidential information can be exposed externally.
|
| CVE-2024-25294 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2024-25294)
SSRF in ssrf (CVE-2024-25294). Confidential information can be exposed externally.
|
| CVE-2024-22873 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2024-22873)
SSRF in ssrf (CVE-2024-22873). Confidential information can be exposed externally.
|
| CVE-2023-36088 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-36088)
SSRF in ssrf (CVE-2023-36088). Confidential information can be exposed externally.
|
| CVE-2023-35175 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-35175)
SSRF in ssrf (CVE-2023-35175). Successful exploitation can lead to full system takeover.
|
| CVE-2023-27162 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-27162)
SSRF in ssrf (CVE-2023-27162). Confidential information can be exposed externally.
|
| CVE-2023-27163 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-27163)
SSRF in ssrf (CVE-2023-27163). Confidential information can be exposed externally.
|
| CVE-2023-27159 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-27159)
SSRF in ssrf (CVE-2023-27159). Confidential information can be exposed externally.
|
| CVE-2023-27160 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-27160)
SSRF in ssrf (CVE-2023-27160). Successful exploitation can lead to full system takeover.
|
| CVE-2023-1725 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-1725)
SSRF in ssrf (CVE-2023-1725). Successful exploitation can lead to full system takeover.
|
| CVE-2023-25262 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-25262)
SSRF in ssrf (CVE-2023-25262). Confidential information can be exposed externally.
|
| CVE-2023-27161 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2023-27161)
SSRF in ssrf (CVE-2023-27161). Confidential information can be exposed externally.
|
| CVE-2022-45085 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2022-45085)
SSRF in ssrf (CVE-2022-45085). Confidential information can be exposed externally.
|
| CVE-2021-37498 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2021-37498)
SSRF in ssrf (CVE-2021-37498). Risk of unauthorized operations or information disclosure.
|
| CVE-2022-42343 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2022-42343)
SSRF in ssrf (CVE-2022-42343). Confidential information can be exposed externally.
|
| CVE-2022-40842 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2022-40842)
SSRF in ssrf (CVE-2022-40842). Confidential information can be exposed externally.
|
| CVE-2022-38580 |
|
Zalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF).
Zalando Skipper v0.13.236 is vulnerable to Server-Side Request Forgery (SSRF).
|
| CVE-2022-36551 |
|
SSRF (Server-Side Request Forgery) in label-studio (CVE-2022-36551)
SSRF in label-studio (CVE-2022-36551). Confidential information can be exposed externally. Mitigation: upgrade to `1.5.0.post0` or later.
|
| CVE-2021-21009 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2021-21009)
SSRF in ssrf (CVE-2021-21009). Confidential information can be exposed externally.
|
| CVE-2020-24815 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2020-24815)
SSRF in ssrf (CVE-2020-24815). Confidential information can be exposed externally.
|
| CVE-2020-28043 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2020-28043)
SSRF in ssrf (CVE-2020-28043). Confidential information can be exposed externally.
|
| CVE-2020-24881 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2020-24881)
SSRF in ssrf (CVE-2020-24881). Successful exploitation can lead to full system takeover.
|
| CVE-2020-25466 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2020-25466)
SSRF in ssrf (CVE-2020-25466). Successful exploitation can lead to full system takeover.
|
| CVE-2020-22983 |
|
SSRF (Server-Side Request Forgery) in ssrf (CVE-2020-22983)
SSRF in ssrf (CVE-2020-22983). Confidential information can be exposed externally.
|