TI-2026-75506 CVE-2026-111720 · GHSA-mc35-74mg-3v34
fish-island-backend SSRF via /api/web/parse
Priority HIGH 70
fish-island-backend through commit 7c61b78 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch attacker-supplied URLs via the url parameter of GET /…