Do Son
TL;DR Vercel fixed three Next.js vulnerabilities, each rated CVSS 8.3. Two of them allow Server-Side Request Forgery,...
Server-Side Request Forgery
TL;DR Red Hat has flagged a critical flaw in Red Hat OpenShift AI. Tracked as CVE-2026-15378, it...
On April 21, 2026, a high-severity Server-Side Request Forgery (SSRF) vulnerability was disclosed in LMDeploy, a popular...
Developers relying on Angular’s Server-Side Rendering (SSR) capabilities need to double-check their security configurations. A highly critical...
Zimbra has released an emergency security patch (version 10.1.12) to address a critical Server-Side Request Forgery (SSRF)...
A severe server-side request forgery (SSRF) vulnerability has been disclosed in BentoML, a widely used Python framework...
A newly disclosed critical vulnerability in Manager.io, a free accounting software used by businesses across Australia and...
JPCERT/CC has issued a warning about two serious vulnerabilities in the Nimesa Backup and Recovery solution, a...
A Server-Side Request Forgery (SSRF) vulnerability has been discovered in the @opennextjs/cloudflare package, potentially allowing unauthenticated users...
LNbits, the modular and extendable Lightning Network wallet server, has patched a critical Server-Side Request Forgery (SSRF)...
Veeam, a prominent player in data management and backup solutions, has recently disclosed a critical vulnerability in...
A newly identified Server-Side Request Forgery (SSRF) vulnerability in Invoice Ninja, a popular open-source invoicing and project...
A critical XML External Entity (XXE) Injection vulnerability, identified as CVE-2024-55875, has been discovered in the http4k...
The Apache Software Foundation has issued an urgent security advisory, disclosing multiple vulnerabilities in its widely used...
A significant security vulnerability has been uncovered in the widely-used node-ip npm package, which is designed to...
Next.js, a leading framework for building full-stack web applications, is widely adopted by some of the world’s...
Security researchers have uncovered a serious vulnerability in the Mobile Security Framework (MobSF). MobSF is a widely...
Teleport, a renowned platform offering centralized authentication and auditing for servers and cloud applications, has recently found...