TI-2026-64664 CVE-2026-100391 · GHSA-5j62-5j8p-jpqh
MediaFlow Proxy through 2.4.9 Server-Side Request Forgery via Incomplete Validation
Priority MEDIUM 44
MediaFlow Proxy through 2.4.9 contains a server-side request forgery vulnerability in the /proxy routes due to missing and incomplete destination validation in the d query parameter.