Skip to content
OpenAdvisories

Vendor

legeling

1 known vulnerabilities.

Products

PromptHub 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-42261

    PromptHub: Authenticated SSRF via IPv6 filter bypass in `POST /api/skills/fetch-remote`

    PromptHub is an all-in-one AI toolbox for prompt, skill, and agent management. From version 0.4.9 to before version 0.5.4, apps/web/src/routes/skills.ts exposes an authenticated endpoint POST /api/skills/fetch-remote that fetches a user-supplied URL server-si…

    legeling PromptHub