Skip to content
OpenAdvisories

Product · OPeNDAP

hyrax-docker

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-16637

    OPeNDAP Hyrax SSRF and Credential Disclosure via Unvalidated Redirects

    OPeNDAP Hyrax allows SSRF and credential disclosure via unvalidated HTTP redirects that bypass the AllowedHosts allowlist and leak Earthdata headers (User-Id, Echo-Token) to attacker-controlled endpoints.

    OPeNDAP hyrax-docker