Go/github.com/casdoor/casdoor CVE-2026-5469: medium 4.7, EPSS 0.31%
Casdoor vulnerable to SSRF via crafted Webhook URL
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.1000.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-p8c7-hjc4-gwf8
- https://nvd.nist.gov/vuln/detail/CVE-2026-5469
- https://github.com/casdoor/casdoor
- https://vuldb.com/submit/781771
- https://vuldb.com/vuln/355073
- https://vuldb.com/vuln/355073/cti
CVE-2026-5469 · published · modified · JSON