Skip to content
OpenAdvisories
High DLA-1962-1 1 CVE

graphite-web - security update

Published Oct 21, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 8 graphite-web 0.9.12+debian-6+deb8u1

Vulnerabilities 1

  • High 7.5
    CVE-2017-18638 Scanner template EPSS 15%

    graphite.composer.views.send_email vulnerable to SSRF

    send_email in graphite-web/webapp/graphite/composer/views.py in Graphite through 1.1.5 is vulnerable to SSRF. The vulnerable SSRF endpoint can be used by an attacker to have the Graphite web server request any resource. The response to this SSRF request is en…

    graphite-web graphite-web graphite-web Debian Ubuntu PyPI