Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: jina-ai Clear all filters
TI-2026-58810 CVE-2026-85699 · GHSA-433w-q37p-w66h

jina-ai reader server-side request forgery via redirect validation bypass

Priority HIGH 77

jina-ai reader contains a server-side request forgery vulnerability where URL validation is performed only on the initial request but not re-applied to subsequent redirect hops.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00482 Published 2026-09-04 No fix listed CWE-918