TI-2026-46465 CVE-2026-65057 · GHSA-xhrh-vggg-q3rj
Keep Unauthenticated Server-Side Request Forgery via POST /providers/healthcheck
Priority HIGH 79
Keep (commit 91c75e0) contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the backend issue arbitrary HTTP requests by supplying attacker-controlled host values to the unpro…