TI-2026-85583 CVE-2026-123204 · GHSA-4ghw-3mh4-pmh7
Server-side request forgery in Posta webhook URLs
Priority LOW 24
Posta before v0.18.0 contains a server-side request forgery vulnerability that allows authenticated users with edit rights to make the backend send POST requests to internal destinations by creating webhooks with arbitra…