TI-2026-11167 CVE-2026-13150 · GHSA-jmg8-x6hq-972w
SSRF in Pentestify PDF generation endpoint via Host header
Priority LOW 37
Server-Side Request Forgery (SSRF) (CWE-918) in the PDF generation endpoint GET /api/reports/{id}/pdf (backend/main.py) in ccyl13 Pentestify 1.0.0 and lower allows remote attackers to make the server issue requests to ar…