TI-2026-38988 CVE-2026-54054
Transmute has full-read SSRF in URL file import (POST /api/files/url) — no host/IP validation, follows redirects
Priority LOW 29
Transmute is a free, open-source, self-hosted file conversion and compression tool.
No transmute-app vulnerabilities are listed in CISA KEV.
1 record
Transmute is a free, open-source, self-hosted file conversion and compression tool.