Skip to content
OpenAdvisories

Vendor

mrblomblo

1 known vulnerabilities.

Products

blombooru 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.2
    CVE-2026-57448

    Blombooru: administrator image-proxy server-side request forgery

    Blombooru is a self-hosted personal booru for organizing and tagging private image collections. Prior to 1.40.0, the administrator-only `GET /proxy-image` endpoint, exposed as `/api/booru-import/proxy-image`, accepts a `url` query parameter and fetches it ser…

    mrblomblo blombooru