Skip to content
OpenAdvisories

Vendor

stringer-rss

1 known vulnerabilities.

Products

stringer 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.6
    CVE-2026-55160

    Authenticated Server-Side Request Forgery (SSRF) via feed URL in Stringer

    Stringer is a self-hosted, anti-social RSS reader. Prior to commit 75cb095, an unrestricted Server-Side Request Forgery (SSRF) vulnerability allows any authenticated user to force the Stringer server to send arbitrary HTTP/HTTPS requests to internal networks,…

    stringer-rss stringer