Skip to content
OpenAdvisories

Vendor

OPeNDAP

1 known vulnerabilities.

Products

hyrax-docker 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-16637

    OPeNDAP Hyrax SSRF and Credential Disclosure via Unvalidated Redirects

    OPeNDAP Hyrax allows SSRF and credential disclosure via unvalidated HTTP redirects that bypass the AllowedHosts allowlist and leak Earthdata headers (User-Id, Echo-Token) to attacker-controlled endpoints.

    OPeNDAP hyrax-docker