Description
An issue in the loopback request handling component of fossar selfoss v2.20-SNAPSHOT allows attackers to execute arbitrary commands and obtain sensitive information via supplying a crafted HTTP request.
Critical · 9.8
CVE-2026-50872
EUVD-2026-36770GHSA-gqmg-cfhg-mw2q
An issue in the loopback request handling component of fossar selfoss v2.20-SNAPSHOT allows attackers to execute arbitrary commands and obt…
Published Jun 15, 2026 · Updated Jun 16, 2026 · Assigned by mitre