Skip to content
OpenAdvisories

Package · Ubuntu

cog

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.3
    CVE-2026-56712 Public exploit

    Replicate Cog through 0.23.1 SSRF via cog.File and cog.Path URL Inputs

    Replicate Cog through 0.23.1 contains a server-side request forgery vulnerability that allows attackers to cause the Cog process to make server-side HTTP requests by submitting prediction inputs with attacker-controlled URLs that are not validated against the…