Skip to content
OpenAdvisories

Vendor

goniszewski

1 known vulnerabilities.

Products

grimoire 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.8
    CVE-2026-119709

    Grimoire before 1.0.0 Unauthenticated SSRF via /api/fetch-metadata

    Grimoire before 1.0.0 contains an unauthenticated server-side request forgery vulnerability in the /api/fetch-metadata POST handler that passes user-supplied URLs to getMetadata() without authentication checks. Attackers can submit URLs targeting loopback, in…

    goniszewski grimoire