Ntfy

Source repositories

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2026-39087	Binwiederhier Ntfy	Med	0.42	6.4	0.00		Apr 23, 2026	ntfy before 2.22.0 allows SSRF because of an unanchored regular expression for web push endpoint URLs.

CVE-2026-39087MedApr 23, 2026
Binwiederhier
Ntfy
risk 0.42cvss 6.4epss 0.00
ntfy before 2.22.0 allows SSRF because of an unanchored regular expression for web push endpoint URLs.