Skip to content
OpenAdvisories

Vendor

lhccong

1 known vulnerabilities.

Products

fish-island-backend 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-111720

    fish-island-backend through commit 7c61b78 SSRF via /api/web/parse

    fish-island-backend through commit 7c61b78 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch attacker-supplied URLs via the url parameter of GET /api/web/parse. Attackers can target int…

    lhccong fish-island-backend