Skip to content
OpenAdvisories

Vendor

pipeshub-ai

4 known vulnerabilities.

Products

pipeshub-ai 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2026-119712 Public exploit

    PipesHub before 0.10.0 SSRF via Image URLs in Indexed Documents

    PipesHub before 0.10.0 contains a server-side request forgery vulnerability in ImageParser._fetch_single_url that allows attackers to make the indexing service fetch internal addresses by embedding image URLs in documents. Attackers can supply Markdown or HTM…

    pipeshub-ai pipeshub-ai
  • Medium 5.3
    CVE-2026-119711

    PipesHub before 0.10.0 Rate Limit Bypass via Spoofed X-Forwarded-For Header

    PipesHub before 0.10.0 contains a rate limit bypass vulnerability in getClientIp() that allows unauthenticated attackers to evade per-IP throttling by spoofing X-Forwarded-For or X-Real-IP headers. Attackers can rotate header values to obtain fresh rate-limit…

    pipeshub-ai pipeshub-ai