CVE ID :CVE-2026-49213 Published : July 10, 2026, 10:16 p.m. | 16 minutes ago Description :TypeBot is a chatbot builder tool. Prior to 3.17.2, Typebot's shared SSRF validator in packages/lib/src/ssrf/validateHttpReqUrl.ts can be bypassed with the IPv6 unspecified address :: because...

#Sicherheitslücke

Original-Artikel öffnen Zurück zur Übersicht

ARTICLEVIEW

CVE-2026-49213 - TypeBot: SSRF protection bypass via IPv6 unspecified address in Typebot HTTP request execution

VERWANDTEARTIKEL

CVE-2026-55882 - Tilt: Unauthenticated pprof debug endpoints on the Tilt HUD server

CVE-2026-55883 - Tilt: Cross-site WebSocket hijacking of the Tilt HUD stream

CVE-2026-55884 - Tilt: Missing authentication on the network-exposed Tilt HUD server

CVE-2026-57584 - Phalcon: Catastrophic backtracking (ReDoS) in the default Phalcon Router route lead to remote unauthenticated DoS

CVE-2026-55852 - Frappe: TarSlip RCE in Package Import

CVE-2026-52747 - ModSecurity: Multipart form-data parser silently strips embedded line breaks from form-field values, enabling request-body inspection bypass