Read the docs

Dub

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Dub records in CISA KEV

No Dub vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-50811 CVE-2026-72552 · GHSA-gvqm-vjxp-3r33

Dub Dub - Server-Side Request Forgery

Priority MEDIUM 40

A server-side request forgery vulnerability in Dub as of 2026-07-10 allows unauthenticated remote attackers to make the server issue HTTP requests to arbitrary internal or external hosts via the metatags edge endpoint.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0061 Published 2026-08-11 No fix listed CWE-918
Open these records in search →