VYPR

Transmute

by Transmute App

CVEs (1)

  • CVE-2026-54054MedSep 10, 2026
    risk 0.42cvss 6.5epss

    Transmute is a free, open-source, self-hosted file conversion and compression tool. Prior to version 1.3.0, Transmute's URL import endpoint, `POST /api/files/url`, is vulnerable to Server-Side Request Forgery (SSRF). The HTTP downloader used by this endpoint fetches…