Product · Apache Software Foundation

Apache Fesod (Incubating)

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.3

CVE-2026-49328

Apache Fesod (Incubating): Improper validation of user-supplied URLs leading to SSRF

Server-Side Request Forgery (SSRF) in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet before 2.0.2-incubating allows attackers to cause outbound network requests to internal or otherwise restricted resources via a user-supplied image …

Apache Software Foundation Apache Fesod (Incubating) org.apache.fesod:fesod-sheet Maven

Jun 1, 2026