VYPR

buku

by Jarun

CVEs (1)

  • CVE-2026-123201MedNov 5, 2026
    risk 0.27cvss 5.3epss —

    Buku (bukuserver) through 5.1.1 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server request internal hosts by supplying a url parameter to /api/fetch_data or /api/network_handle. Attackers can target loopback,…