goniszewski

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

goniszewski records in CISA KEV

No goniszewski vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-83184 CVE-2026-119709 · GHSA-v3p4-vhx3-fmh5

Unauthenticated SSRF in Grimoire via /api/fetch-metadata

LOW 37

Grimoire before 1.0.0 contains an unauthenticated server-side request forgery vulnerability in the /api/fetch-metadata POST handler that passes user-supplied URLs to getMetadata() without authentication checks.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00406 Published 2026-10-30 Fixed in 1.0.0 CWE-918

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0