Skip to content
OpenAdvisories

Vendor

webstudio-is

2 known vulnerabilities.

Products

webstudio 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.6
    CVE-2026-86119

    Webstudio through 0.296.0 SSRF via /cgi proxy routes

    Webstudio through 0.296.0 contains an unauthenticated server-side request forgery vulnerability in the /cgi/image, /cgi/video, and /cgi/asset proxy routes when RESIZE_ORIGIN environment variable is unset. Attackers can supply arbitrary URLs to these endpoints…

    webstudio-is webstudio