gcdRadar
tags/Attack types

ssrf

0 live · 144 on record · last incident 1 day ago

Dec ’25records per month, by first reportNov ’26

Records144

  1. closed6.3
    Flowise CVE-2026-127214: Flowise server-side request forgery vulnerability

    Patch now · Disclosed · since 13 Nov 2026 · CVE-2026-127214

    AI
  2. closed
    Microsoft 365 Agents SDK CVE-2026-109485 Microsoft 365 Agents SDK Information Disclosure Vulnerability

    Patch now · Disclosed · since 10 Nov 2026 · CVE-2026-109485

    AI
  3. closed5.3
    NVIDIA NeMo CVE-2026-100962: NVIDIA NeMo Export-Deploy SSRF Vulnerability

    Patch now · Disclosed · since 10 Nov 2026 · CVE-2026-100962

    AI
  4. closed7.2
    Dify CVE-2026-58141: Dify SSRF Vulnerability in Console API

    Patch now · Disclosed · Patched · since 6 Nov 2026 · CVE-2026-58141

    AI
  5. closed
    PeopleSoft CVE-2026-35273: Oracle PeopleSoft Zero-Day Chained Flaws Exploited

    Patch now · Exploited · Patched · since Jun 2026 (approx.) · CVE-2026-35273

  6. closed7.1
    NVIDIA TensorRT-LLM CVE-2026-65120: NVIDIA TensorRT-LLM Server-Side Request Forgery Vulnerability

    Patch now · Disclosed · since 27 Oct 2026 · CVE-2026-65120

    AI
  7. closed6.5
    MCP SDKs CVE-2026-116686: Model Context Protocol Python SDK SSRF and local file read via schema resolution

    Patch now · Disclosed · Patched · since 27 Oct 2026 · CVE-2026-116686

    AI
  8. closed7.1
    NVIDIA TensorRT-LLM CVE-2026-24269: NVIDIA TensorRT-LLM server-side request forgery vulnerability

    Patch now · Disclosed · since 27 Oct 2026 · CVE-2026-24269

    AI
  9. closed8.8
    vLLM CVE-2026-116176: vLLM server-side request forgery leads to NCCL unique_id and KV-cache leakage

    Patch now · Disclosed · since 25 Oct 2026 · CVE-2026-116176

    AI
  10. closed7.7
    Azure AI Foundry CVE-2026-108456: Server-side request forgery in Azure AI Foundry

    Patch now · Disclosed · since 22 Oct 2026 · CVE-2026-108456

    AI
  11. closed9.2
    LocalAI CVE-2026-114493: LocalAI Gallery SSRF Vulnerability

    Patch now · Disclosed · since 21 Oct 2026 · CVE-2026-114493

    AI
  12. closed6.9
    SGLang CVE-2026-112267: SGLang server-side request forgery vulnerability

    Patch now · Disclosed · since 19 Oct 2026 · CVE-2026-112267

    AI
  13. closed7.2
    Portkey AI Gateway Portkey AI Gateway Server-Side Request Forgery Vulnerability

    Patch now · Disclosed · since 14 Oct 2026 · CVE-2026-110719

    AI
  14. closed7.3
    Ollama CVE-2026-108836: Server-side request forgery in Ollama pull API

    Patch now · Disclosed · since 12 Oct 2026 · CVE-2026-108836

    AI
  15. closed8.3
    Dify CVE-2026-105762: SSRF vulnerability in Dify remote file upload endpoint

    Patch now · Disclosed · since 6 Oct 2026 · CVE-2026-105762

    AI
  16. closed5.7
    Amazon Bedrock AgentCore SSRF in Amazon Bedrock AgentCore Starter Toolkit OpenAPI Schema Processing

    Patch now · Disclosed · since 6 Oct 2026 · CVE-2026-106032

    AI
  17. closed
    Langflow Langflow SSRF Vulnerability in URL-Taking Components

    Patch now · Disclosed · since 6 Oct 2026

    AI
  18. closed7.1
    MCP servers & tools CVE-2026-77261: SSRF vulnerability in MCP Atlassian server

    Patch now · Disclosed · since 22 Sep 2026 · CVE-2026-77261

    AI
  19. closed8.8
    MCP servers & tools CVE-2026-77274: Backslash authority confusion SSRF in MCP Atlassian

    Patch now · Disclosed · since 22 Sep 2026 · CVE-2026-77274

    AI
  20. closed8.3
    MCP servers & tools CVE-2026-77267: Header-based SSRF vulnerability in MCP Atlassian server

    Patch now · Disclosed · since 22 Sep 2026 · CVE-2026-77267

    AI
  21. closed7.5
    MCP servers & tools CVE-2026-77242: DNS rebinding vulnerability in MCP Atlassian server

    Patch now · Disclosed · since 22 Sep 2026 · CVE-2026-77242

    AI
  22. closed5.3
    MCP servers & tools CVE-2026-77249: SSRF vulnerability in MCP Atlassian server user lookup

    Patch now · Disclosed · since 22 Sep 2026 · CVE-2026-77249

    AI
  23. closed5.9
    MCP servers & tools CVE-2026-77265: DNS rebinding SSRF vulnerability in MCP Atlassian server

    Patch now · Disclosed · since 22 Sep 2026 · CVE-2026-77265

    AI
  24. closed7.5
    Azure AI Foundry CVE-2026-85917: Server-side request forgery in Azure AI Foundry

    Patch now · Disclosed · since 17 Sep 2026 · CVE-2026-85917

    AI
  25. closed7.6
    Flowise Flowise Document Loader SSRF Vulnerability

    Patch now · Disclosed · since 15 Sep 2026 · CVE-2026-91938

    AI
  26. closed8.7
    Flowise Flowise baseURL Parameter Validation Flaw Allows Request Redirection

    Patch now · Disclosed · since 15 Sep 2026 · CVE-2026-91935

    AI
  27. closed7.1
    MCP servers & tools CVE-2026-58485: mcp-searxng susceptible to server-side request forgery

    Patch now · Disclosed · since 15 Sep 2026 · CVE-2026-58485

    AI
  28. closed8.5
    MCP servers & tools CVE-2026-59973: FrontMCP vulnerable to SSRF in OpenAPI spec loading

    Patch now · Disclosed · since 15 Sep 2026 · CVE-2026-59973

    AI
  29. closed6.3
    MCP servers & tools CVE-2026-54689: URL policy bypass vulnerability in mcp-searxng

    Patch now · Disclosed · since 15 Sep 2026 · CVE-2026-54689

    AI
  30. closed6.5
    MCP servers & tools CVE-2026-54688: SSRF vulnerability in mcp-searxng MCP server

    Patch now · Disclosed · since 15 Sep 2026 · CVE-2026-54688

    AI
  31. closed8.3
    MCP servers & tools CVE-2026-54549: Meta Ads MCP Unvalidated Image URL Vulnerability

    Patch now · Disclosed · since 15 Sep 2026 · CVE-2026-54549

    AI
  32. closed4.7
    MCP servers & tools CVE-2026-58196: ToolHive Authentication Discovery Vulnerability

    Patch now · Disclosed · since 15 Sep 2026 · CVE-2026-58196

    AI
  33. closed5.4
    Langflow CVE-2026-12766: Server-side request forgery vulnerability in Langflow OSS

    Patch now · Disclosed · since 14 Sep 2026 · CVE-2026-12766

    AI
  34. closed6.5
    Langflow CVE-2026-12767: Server-side request forgery vulnerability in Langflow OSS

    Patch now · Disclosed · since 14 Sep 2026 · CVE-2026-12767

    AI
  35. closed6.5
    Langflow CVE-2026-12765: Server-side request forgery vulnerability in Langflow OSS

    Patch now · Disclosed · since 14 Sep 2026 · CVE-2026-12765

    AI
  36. closed6.5
    MCP servers & tools CVE-2026-73497: MCP Atlassian server vulnerable to SSRF via DNS rebinding

    Patch now · Disclosed · since 14 Sep 2026 · CVE-2026-73497

    AI
  37. closed6.3
    Flowise CVE-2026-90580: Flowise Server-Side Request Forgery Vulnerability

    Patch now · Disclosed · since 13 Sep 2026 · CVE-2026-90580

    AI
  38. closed8.6
    Langflow CVE-2026-81213: IBM Langflow OSS internal resource information disclosure

    Patch now · Disclosed · since 10 Sep 2026 · CVE-2026-81213

    AI
  39. closed7.1
    Open WebUI CVE-2026-87999: Open WebUI server-side request fetch bypass to internal endpoints

    Patch now · Disclosed · since 10 Sep 2026 · updated 10 Sep 2026 · CVE-2026-87999

    AI
  40. closed7.7
    Open WebUI CVE-2026-87996: Open WebUI SSRF via DNS Rebinding in Playwright Loader

    Patch now · Disclosed · since 10 Sep 2026 · updated 10 Sep 2026 · CVE-2026-87996

    AI
  41. closed5.0
    Open WebUI Open WebUI SSRF vulnerability via unvalidated HTTP redirect targets

    Patch now · Disclosed · since 9 Sep 2026 · CVE-2026-88001

    AI
  42. closed8.6
    Langflow CVE-2026-19305 in IBM Langflow OSS features severe server-side request forgery flaw

    Patch now · Disclosed · since 4 Sep 2026 · CVE-2026-19305

    AI
  43. closed5.0
    Langflow CVE-2026-19301 in IBM Langflow OSS enables server-side request forgery for data access

    Patch now · Disclosed · since 4 Sep 2026 · CVE-2026-19301

    AI
  44. closed5.0
    Langflow CVE-2026-17631: IBM Langflow OSS server-side request forgery vulnerability

    Patch now · Disclosed · since 4 Sep 2026 · CVE-2026-17631

    AI
  45. closed8.7
    Ollama CVE-2026-85180: Ollama redirect validation flaw allows arbitrary host requests during model pulls

    Patch now · Disclosed · since 3 Sep 2026 · CVE-2026-85180

    AI
  46. closed6.5
    LiteLLM CVE-2026-84377: LiteLLM Authenticated SSRF and Credential Exfiltration

    Patch now · Disclosed · since 30 Sep 2026 · updated 30 Sep 2026 · CVE-2026-84377

    AI
  47. closed4.3
    Langflow CVE-2026-18545: SSRF vulnerability in IBM Langflow OSS

    Patch now · Disclosed · since 28 Aug 2026 · CVE-2026-18545

    AI
  48. closed8.7
    Qwen-Agent CVE-2026-82268: Qwen-Agent Document Parsing Path Server-Side Request Forgery

    Patch now · Disclosed · since 28 Aug 2026 · CVE-2026-82268

    AI
  49. closed8.6
    LangChain family CVE-2026-72848: LangChain SitemapLoader vulnerable to unrestricted sitemap scraping

    Patch now · Disclosed · since 20 Aug 2026 · CVE-2026-72848

    AI
  50. closed6.5
    vLLM CVE-2026-73560: vLLM multimodal processor vulnerable to arbitrary file reads and SSRF

    Patch now · Disclosed · since 17 Aug 2026 · updated 8 Sep 2026 · CVE-2026-73560

    AI
  51. closed7.3
    MCP servers & tools CVE-2026-19753: Server-side request forgery in mcp-rdf-explorer MCP Server

    Patch now · Disclosed · since 13 Aug 2026 · CVE-2026-19753

    AI
  52. closed9.0
    Flowise CVE-2026-73487: Flowise prompt injection bypass leads to RCE and SSRF

    Patch now · Disclosed · since 7 Oct 2026 · updated 7 Oct 2026 · CVE-2026-73487

    AI
  53. closed7.7
    Flowise CVE-2026-67620: Flowise SSRF Vulnerability in Metadata Guard

    Patch now · Disclosed · since 8 Aug 2026 · CVE-2026-67620

    AI
  54. closed6.5
    Langflow CVE-2026-7657: IBM Langflow OSS SSRF Vulnerability

    Patch now · Disclosed · since 5 Aug 2026 · CVE-2026-7657

    AI
  55. closed7.1
    Langflow IBM Langflow OSS Server-Side Request Forgery vulnerability in Ollama provider

    Patch now · Disclosed · since 5 Aug 2026 · CVE-2026-9081

    AI
  56. closed8.5
    Flowise CVE-2026-69250: Flowise Unauthenticated OAuth2 Refresh Enables SSRF and Secret Exfiltration

    Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-69250

    AI
  57. closed7.6
    Flowise Flowise SSRF protection bypass via IPv4-mapped IPv6 addresses

    Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-69257

    AI
  58. closed7.7
    Open WebUI Open WebUI SSRF Vulnerability CVE-2026-70479 via Playwright

    Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-70479

    AI
  59. closed4.1
    Open WebUI Open WebUI Vulnerability CVE-2026-70480 Allows Outbound Requests

    Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-70480

    AI
  60. closed7.1
    Open WebUI CVE-2026-70485: Open WebUI vulnerable to SSRF through NAT64 IPv6 encoding

    Patch now · Disclosed · since 4 Aug 2026 · CVE-2026-70485

    AI
  61. closed7.7
    Langflow CVE-2026-7754: IBM Langflow SSRF Vulnerability

    Patch now · Disclosed · since 17 Jul 2026 · CVE-2026-7754

    AI
  62. closed6.8
    NVIDIA TensorRT-LLM CVE-2026-24234: NVIDIA TensorRT-LLM Server-Side Request Forgery

    Patch now · Disclosed · since 14 Jul 2026 · CVE-2026-24234

    AI
  63. closed9.2
    MCP servers & tools CVE-2026-15643: AWS HealthLake MCP Server SSRF Credential Exfiltration

    Patch now · Disclosed · since 14 Jul 2026 · CVE-2026-15643

    AI
  64. closed4.3
    Open WebUI CVE-2026-59223: Open WebUI WEB_FETCH_FILTER_LIST host filter bypass

    Patch now · Disclosed · since 24 Jul 2026 · updated 24 Jul 2026 · CVE-2026-59223

    AI
  65. closed7.4
    Gradio Gradio SSRF and Open Redirect Vulnerability CVE-2026-59806

    Patch now · Disclosed · since 8 Jul 2026 · CVE-2026-59806

    AI
  66. closed9.3
    mem0 Mem0 Unauthenticated API Exposes LLM API Keys and Permits SSRF

    Patch now · Disclosed · since 7 Jul 2026 · CVE-2026-59706

    AI
  67. closed9.2
    LocalAI LocalAI Unauthenticated Server-Side Request Forgery Vulnerability

    Patch now · Disclosed · since 7 Jul 2026 · CVE-2026-59707

    AI
  68. closed9.9
    Azure OpenAI CVE-2026-45499: Server-side request forgery in Azure OpenAI

    Patch now · Disclosed · since 2 Jul 2026 · CVE-2026-45499

    AI
  69. closed7.1
    Langflow CVE-2026-10546: IBM Langflow OSS SSRF Vulnerability

    Patch now · Disclosed · since 30 Jun 2026 · CVE-2026-10546

    AI
  70. closed5.3
    Open WebUI CVE-2026-56399: Open WebUI contains a server-side request forgery vulnerability in retrieval endpoint

    Patch now · Disclosed · since 30 Jun 2026 · CVE-2026-56399

    AI
  71. closed8.5
    Langflow CVE-2026-10129: IBM Langflow OSS API request SSRF protection bypass

    Patch now · Disclosed · since 30 Jun 2026 · CVE-2026-10129

    AI
  72. closed8.2
    Langflow CVE-2026-10564: IBM Langflow OSS SSRF vulnerability in components

    Patch now · Disclosed · since 30 Jun 2026 · CVE-2026-10564

    AI
  73. closed6.3
    LiteLLM CVE-2026-12774: SSRF vulnerability in BerriAI LiteLLM MCP server

    Patch now · Disclosed · since 21 Jun 2026 · CVE-2026-12774

    AI
  74. closed6.3
    LiteLLM CVE-2026-12798: BerriAI litellm SSRF via spec_path URL loader

    Patch now · Disclosed · since 21 Jun 2026 · CVE-2026-12798

    AI
  75. closed8.5
    Open WebUI CVE-2026-54008: Open WebUI Redirect-Bypass SSRF in OAuth Processing

    Patch now · Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54008

    AI
  76. closed7.7
    Open WebUI CVE-2026-54018: Open WebUI SSRF Protection Bypass via HTTP Redirects

    Patch now · Disclosed · since 17 Jun 2026 · updated 23 Jun 2026 · CVE-2026-54018

    AI
  77. closed7.7
    Open WebUI CVE-2026-54017: Open WebUI terminal server proxy path traversal and SSRF

    Patch now · Disclosed · since 17 Jun 2026 · updated 18 Jun 2026 · CVE-2026-54017

    AI
  78. closed5.4
    Langflow CVE-2026-3341: Server-side request forgery vulnerability in IBM Langflow Desktop

    Patch now · Disclosed · since 11 Jun 2026 · CVE-2026-3341

    AI
  79. closed7.2
    MCP servers & tools Spring AI mcp-security Lacks Mandatory SSRF Mitigations

    Patch now · Disclosed · since 29 May 2026 · CVE-2026-45609

    AI
  80. closed8.5
    Open WebUI CVE-2026-45400: Open WebUI SSRF Bypass in validate_url

    Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45400

    AI
  81. closed8.5
    Open WebUI CVE-2026-45331: Open WebUI SSRF Bypass in RAG Web Search Feature

    Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45331

    AI
  82. closed7.7
    Open WebUI CVE-2026-45338: Open WebUI Vulnerable to SSRF via OAuth Profile Picture

    Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45338

    AI
  83. closed8.5
    Open WebUI CVE-2026-45401: Open WebUI SSRF bypass via HTTP redirect

    Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45401

    AI
  84. closed4.3
    Open WebUI CVE-2026-45347: Open WebUI blind SSRF vulnerability in PDF export

    Patch now · Disclosed · since 14 May 2026 · updated 15 May 2026 · CVE-2026-45347

    AI
  85. closed6.5
    Langflow CVE-2026-3340: IBM Langflow Desktop server-side request forgery

    Patch now · Disclosed · since 30 Apr 2026 · CVE-2026-3340

    AI
  86. closed6.3
    NVIDIA NemoClaw NVIDIA NeMoClaw validateEndpointUrl SSRF vulnerability

    Patch now · Disclosed · since 28 Apr 2026 · CVE-2026-24231

    AI
  87. closed3.1
    LangChain family LangChain langchain-openai TOCTOU DNS rebinding vulnerability

    Patch now · Disclosed · since 24 Apr 2026 · CVE-2026-41488

    AI
  88. closed6.5
    LangChain family LangChain URL validation SSRF vulnerability in HTMLHeaderTextSplitter

    Patch now · Disclosed · since 24 Apr 2026 · CVE-2026-41481

    AI
  89. closed6.3
    Dify CVE-2026-6618: Server-side request forgery vulnerability in langgenius dify parser

    Patch now · Disclosed · since 20 Apr 2026 · CVE-2026-6618

    AI
  90. closed6.3
    Dify CVE-2026-6617: Server-side request forgery vulnerability in langgenius dify

    Patch now · Disclosed · since 20 Apr 2026 · CVE-2026-6617

    AI
  91. closed7.1
    Flowise CVE-2026-41270: Flowise SSRF Protection Bypass via Built-in HTTP Modules

    Patch now · Disclosed · since 16 Apr 2026 · updated 23 Apr 2026 · CVE-2026-41270

    AI
  92. closed7.1
    Flowise CVE-2026-41272: Flowise SSRF Protection Bypass via DNS Rebinding and Default Insecure Config

    Patch now · Disclosed · since 16 Apr 2026 · updated 23 Apr 2026 · CVE-2026-41272

    AI
  93. closed5.3
    Flowise CVE-2026-43995: Flowise SSRF Protection Bypass via Direct HTTP Client Usage

    Patch now · Disclosed · since 16 Apr 2026 · updated 11 May 2026 · CVE-2026-43995

    AI
  94. closed7.1
    Flowise CVE-2026-41271: Flowise APIChain Prompt Injection SSRF

    Patch now · Disclosed · since 16 Apr 2026 · updated 23 Apr 2026 · CVE-2026-41271

    AI
  95. closed7.1
    Flowise CVE-2026-56275: Flowise Execute Flow node server-side request forgery

    Patch now · Disclosed · since 16 Apr 2026 · updated 23 Jun 2026 · CVE-2026-56275

    AI
  96. closed4.3
    Open WebUI CVE-2026-34225: Open WebUI blind SSRF in image edit functionality

    Patch now · Disclosed · since 7 Jul 2026 · updated 7 Jul 2026 · CVE-2026-34225

    AI
  97. closed7.5
    MCP servers & tools FrontMCP SSRF Vulnerability in OpenAPI Specification Processing

    Patch now · Disclosed · since 8 Apr 2026 · CVE-2026-39885

    AI
  98. closed6.3
    Ollama CVE-2026-5530: Server-side request forgery flaw found in Ollama

    Patch now · Disclosed · since 5 Apr 2026 · CVE-2026-5530

    AI
  99. closed7.7
    PraisonAI CVE-2026-34936: Arbitrary Request Vulnerability in PraisonAI Agent Framework

    Patch now · Disclosed · since 3 Apr 2026 · CVE-2026-34936

    AI
  100. closed6.3
    MCP servers & tools CVE-2026-5470: SSRF Vulnerability in Google-Research-MCP Content Extractor

    Patch now · Disclosed · since 3 Apr 2026 · CVE-2026-5470

    AI
  101. closed5.4
    vLLM CVE-2026-34753: vLLM Server-Side Request Forgery in batch runner

    Patch now · Disclosed · since 3 Apr 2026 · updated 6 Apr 2026 · CVE-2026-34753

    AI
  102. closed10.0
    FastMCP CVE-2026-32871: FastMCP OpenAPI Provider SSRF and Path Traversal

    Patch now · Disclosed · since 31 Mar 2026 · CVE-2026-32871

    AI
  103. closed9.1
    LoLLMs CVE-2026-33340: LoLLMs WEBUI contains a Server-Side Request Forgery vulnerability

    Patch now · Disclosed · since 24 Mar 2026 · CVE-2026-33340

    AI
  104. closed8.2
    MCP servers & tools MCP Atlassian unauthenticated server-side request forgery vulnerability

    Patch now · Disclosed · since 10 Mar 2026 · CVE-2026-27826

    AI
  105. closed7.1
    Flowise CVE-2026-31829: Flowise Affected by Server-Side Request Forgery in HTTP Node

    Patch now · Disclosed · since 11 Mar 2026 · updated 11 Mar 2026 · CVE-2026-31829

    AI
  106. closed5.4
    vLLM CVE-2026-25960: vLLM has SSRF Protection Bypass

    Patch now · Disclosed · since 9 Mar 2026 · CVE-2026-25960

    AI
  107. closed8.2
    Gradio CVE-2026-28416: Gradio SSRF via Malicious proxy_url Injection

    Patch now · Disclosed · since 1 Mar 2026 · updated 1 Mar 2026 · CVE-2026-28416

    AI
  108. closed4.1
    LangChain family CVE-2026-27795: LangChain Community RecursiveUrlLoader SSRF Bypass

    Patch now · Disclosed · since 25 Feb 2026 · CVE-2026-27795

    AI
  109. closed4.1
    LangChain family CVE-2026-26019: LangChain Community RecursiveUrlLoader SSRF Bypass

    Patch now · Disclosed · since 11 Feb 2026 · CVE-2026-26019

    AI
  110. closed3.7
    LangChain family CVE-2026-26013: LangChain ChatOpenAI SSRF via Image Token Counting

    Patch now · Disclosed · since 11 Feb 2026 · updated 11 Feb 2026 · CVE-2026-26013

    AI
  111. closed7.1
    vLLM CVE-2026-24779: vLLM MediaConnector vulnerable to Server-Side Request Forgery

    Patch now · Disclosed · since 28 Jan 2026 · updated 28 Jan 2026 · CVE-2026-24779

    AI
  112. closed7.7
    Langflow CVE-2025-68477: SSRF vulnerability via API Request component in Langflow

    Patch now · Disclosed · since 19 Dec 2025 · CVE-2025-68477

    AI
  113. closed8.5
    Open WebUI CVE-2025-65958: Open WebUI SSRF via Web Retrieval API

    Patch now · Disclosed · since 4 Dec 2025 · CVE-2025-65958

    AI
  114. closed7.6
    NVIDIA NeMo NVIDIA NeMo Agent Toolkit SSRF Vulnerability CVE-2025-33203

    Patch now · Disclosed · since 25 Nov 2025 · CVE-2025-33203

    AI
  115. closed3.0
    Lobe Chat CVE-2025-62505: Lobe Chat Server-Side Request Forgery

    Patch now · Disclosed · since 17 Oct 2025 · CVE-2025-62505

    AI
  116. closed7.1
    vLLM CVE-2025-6242: vLLM vulnerable to SSRF through MediaConnector

    Patch now · Disclosed · since 7 Oct 2025 · CVE-2025-6242

    AI
  117. closed5.3
    Dify CVE-2025-56520: Server-Side Request Forgery vulnerability in Dify v1.6.0

    Patch now · Disclosed · since 30 Sep 2025 · CVE-2025-56520

    AI
  118. closed6.9
    MCP servers & tools CVE-2025-59155: hackmd-mcp server-side request forgery vulnerability

    Patch now · Disclosed · since 15 Sep 2025 · CVE-2025-59155

    AI
  119. closed7.5
    Flowise CVE-2025-59527: Server-Side Request Forgery vulnerability in Flowise

    Patch now · Disclosed · since 22 Sep 2025 · updated 22 Sep 2025 · CVE-2025-59527

    AI
  120. closed8.4
    LangChain family CVE-2025-2828: LangChain Community RequestsToolkit SSRF Vulnerability

    Patch now · Disclosed · since 23 Jun 2025 · CVE-2025-2828

    AI
  121. closed4.8
    Dify CVE-2025-29720: Server-Side Request Forgery vulnerability in Dify

    Patch now · Disclosed · since 14 Apr 2025 · CVE-2025-29720

    AI
  122. closed8.8
    Dify CVE-2024-10252: Code injection vulnerability in Dify sandbox service

    Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-10252

    AI
  123. closed7.7
    GPT Academic CVE-2024-11030: Server-side request forgery vulnerability in GPT Academic

    Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-11030

    AI
  124. closed7.7
    GPT Academic CVE-2024-11031: gpt_academic Server-Side Request Forgery vulnerability

    Patch now · Disclosed · since 20 Mar 2025 · CVE-2024-11031

    AI
  125. closed8.1
    Lobe Chat CVE-2024-32965: LobeChat server side request forgery vulnerability

    Patch now · Disclosed · since 26 Nov 2024 · CVE-2024-32965

    AI
  126. closed6.5
    Gradio CVE-2024-48052: Gradio Server Side Request Forgery Vulnerability

    Patch now · Disclosed · since 5 Nov 2024 · updated 5 Nov 2024 · CVE-2024-48052

    AI
  127. closed7.2
    Gradio CVE-2024-47167: Gradio vulnerable to SSRF in queue join endpoint

    Patch now · Disclosed · since 10 Oct 2024 · CVE-2024-47167

    AI
  128. closed9.0
    Lobe Chat CVE-2024-47066: Lobe-chat SSRF protection bypass vulnerability

    Patch now · Disclosed · since 23 Sep 2024 · CVE-2024-47066

    AI
  129. closed8.7
    LiteLLM CVE-2024-6587: LiteLLM Server-Side Request Forgery vulnerability

    Patch now · Disclosed · since 13 Sep 2024 · CVE-2024-6587

    AI
  130. closed8.5
    Copilot Studio CVE-2024-38206: SSRF protection bypass in Microsoft Copilot Studio

    Patch now · Disclosed · since 6 Aug 2024 · CVE-2024-38206

    AI
  131. closed5.8
    LocalAI CVE-2024-6095: SSRF and LFI vulnerability in LocalAI models apply endpoint

    Patch now · Disclosed · since 6 Jul 2024 · CVE-2024-6095

    AI
  132. closed8.6
    Gradio CVE-2024-4325: SSRF Vulnerability in Gradio

    Patch now · Disclosed · since 6 Jun 2024 · CVE-2024-4325

    AI
  133. closed4.8
    LangChain family CVE-2024-3095: SSRF in langchain-community Web Research Retriever

    Patch now · Disclosed · since 6 Jun 2024 · CVE-2024-3095

    AI
  134. closed9.0
    Lobe Chat CVE-2024-32964: Lobe-chat unauthorized SSRF vulnerability in proxy API

    Patch now · Disclosed · since 10 May 2024 · CVE-2024-32964

    AI
  135. closed6.4
    Open WebUI CVE-2024-30256: Open WebUI authenticated blind SSRF vulnerability

    Patch now · Disclosed · since 16 Apr 2024 · CVE-2024-30256

    AI
  136. closed6.5
    Gradio Gradio Server-Side Request Forgery Vulnerability

    Patch now · Disclosed · since 16 Apr 2024 · CVE-2024-1183

    AI
  137. closed7.3
    Gradio CVE-2024-2206: Gradio Server-Side Request Forgery vulnerability

    Patch now · Disclosed · since 27 Mar 2024 · CVE-2024-2206

    AI
  138. closed6.3
    LangChain family Server-side request forgery in LangChain TFIDFRetriever

    Patch now · Disclosed · since 1 Mar 2024 · CVE-2024-2057

    AI
  139. closed9.6
    AnythingLLM Internal link-scraping SSRF vulnerability in AnythingLLM

    Patch now · Disclosed · since 27 Feb 2024 · CVE-2024-0759

    AI
  140. closed9.9
    AnythingLLM CVE-2024-0455: AnythingLLM web scraper metadata credential exposure

    Patch now · Disclosed · since 26 Feb 2024 · CVE-2024-0455

    AI
  141. closed3.7
    LangChain family CVE-2024-0243: LangChain Server-Side Request Forgery vulnerability

    Patch now · Disclosed · since 26 Feb 2024 · CVE-2024-0243

    AI
  142. closed8.6
    Gradio CVE-2023-51449: File traversal and SSRF vulnerability in Gradio

    Patch now · Disclosed · since 21 Dec 2023 · updated 22 Dec 2023 · CVE-2023-51449

    AI
  143. closed7.5
    LangChain family CVE-2023-32786: Prompt injection and SSRF vulnerability in Langchain

    Patch now · Disclosed · since 20 Oct 2023 · CVE-2023-32786

    AI
  144. closed8.8
    LangChain family CVE-2023-46229: LangChain Server Side Request Forgery vulnerability

    Patch now · Disclosed · since 19 Oct 2023 · CVE-2023-46229

    AI