refly-ai

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

refly-ai records in CISA KEV

No refly-ai vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-65085 CVE-2026-101052 · GHSA-rjf7-j2f2-fmhv

refly-ai refly JWT Token app.config.ts hard-coded credentials

HIGH 70

A security vulnerability has been detected in refly-ai refly up to 1.1.0.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00278 Published 2026-09-28 No fix listed CWE-259

TI-2026-61922 CVE-2026-91199 · GHSA-8jjj-988v-wwgg

Refly through 1.1.0 Server-Side Request Forgery via scrape endpoint

LOW 24

Refly through 1.1.0 contains a server-side request forgery vulnerability in the POST /v1/misc/scrape endpoint that fetches caller-supplied URLs without validating the scheme, host, or resolved address.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00342 Published 2026-09-14 No fix listed CWE-918

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0