npm/postiz: high
Postiz has Multiple SSRF Vectors - Webhooks, RSS Feed, URL Loader
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.0.12 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-89v5-38xr-9m4j
- https://github.com/gitroomhq/postiz-app/security/advisories/GHSA-89v5-38xr-9m4j
- https://github.com/gitroomhq/postiz-app/commit/0ad89ccd26b1c387c4f3f3544b18c20d33586466
- https://github.com/gitroomhq/postiz-app/commit/be5d871896e97cb1f5a2c9241f156b6a1e1debe8
- https://github.com/gitroomhq/postiz-app
- https://github.com/gitroomhq/postiz-app/releases/tag/v2.21.2
published · modified · JSON