Skip to content
OpenAdvisories

Product · stringer-rss

stringer

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.6
    CVE-2026-55160

    Authenticated Server-Side Request Forgery (SSRF) via feed URL in Stringer

    Stringer is a self-hosted, anti-social RSS reader. Prior to commit 75cb095, an unrestricted Server-Side Request Forgery (SSRF) vulnerability allows any authenticated user to force the Stringer server to send arbitrary HTTP/HTTPS requests to internal networks,…

    stringer-rss stringer