VYPR
Vendor

Blombooru

Products
1
CVEs
1
Across products
0
Status
Private

Products

1

Recent CVEs

1
  • CVE-2026-57448MedOct 28, 2026
    risk 0.33cvss —epss —

    Blombooru is a self-hosted personal booru for organizing and tagging private image collections. Prior to 1.40.0, the administrator-only `GET /proxy-image` endpoint, exposed as `/api/booru-import/proxy-image`, accepts a `url` query parameter and fetches it server-side without…