Critical severity9.8NVD Advisory· Published Apr 23, 2026· Updated May 4, 2026
CVE-2026-39087
CVE-2026-39087
Description
ntfy before 2.22.0 allows SSRF because of an unanchored regular expression.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
heckel.io/ntfy/v2Go | < 2.22.0 | 2.22.0 |
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6News mentions
0No linked articles in our index yet.