Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Fesod (Incubating)

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2026-107460

    Apache Fesod (Incubating): UrlImageConverter SSRF protection bypass via DNS rebinding

    Server-Side Request Forgery (SSRF) protection in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet 2.0.2-incubating can be bypassed through DNS rebinding. When an application accepts an attacker-controlled image URL for spreadsheet writ…

    Apache Software Foundation Apache Fesod (Incubating)