VYPR

fish-island-backend

by Lhccong

CVEs (1)

  • CVE-2026-111720MedOct 16, 2026
    risk 0.34cvss 5.3epss —

    fish-island-backend through commit 7c61b78 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch attacker-supplied URLs via the url parameter of GET /api/web/parse. Attackers can target internal hosts,…