TI-2026-58802 CVE-2026-85691 · GHSA-242x-h644-mf6jMegaParse 0.0.55 Server-Side Request Forgery via POST /v1/urlPriority MEDIUM 44MegaParse 0.0.55 contains an unauthenticated server-side request forgery vulnerability in the POST /v1/url endpoint that fetches caller-supplied URLs server-side.CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00593 · Published 2026-09-04 · No fix listed CWE-918