Vendors / jina-ai Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now jina-ai records in CISA KEV No jina-ai vulnerabilities are listed in CISA KEV.
Priority HIGH 77
jina-ai reader contains a server-side request forgery vulnerability where URL validation is performed only on the initial request but not re-applied to subsequent redirect hops.
CVSS 4.0 HIGH 8.7· Network · No auth · No interaction · EPSS 0.00482 · Published 2026-09-04 · No fix listed CWE-918
Priority HIGH 77
jina-ai reader disables its private-address guard outside Google Cloud deployments, allowing unauthenticated attackers to perform server-side request forgery.
CVSS 4.0 HIGH 8.7· Network · No auth · No interaction · EPSS 0.00497 · Published 2026-08-30 · No fix listed CWE-918
Priority HIGH 70
A security vulnerability has been detected in jina-ai reader up to 1574bfd380d249c86c82db4dace0d9c8fe17e2b1.
CVSS 4.0 MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00472 · Published 2026-08-03 · No fix listed CWE-918
Open these records in search → All records by CVSS severity
0 2 1 0 0
