CVE-2026-42180
1 advisory.
crates.io/lemmy_api_common CVE-2026-42180: medium 6.3, EPSS 0.29%
Lemmy has SSRF in /api/v3/post via Webmention dispatch
Action: Upgrade lemmy_api_common to 0.19.18 or later.
cargo update -p lemmy_api_common --precise 0.19.18Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.19.18 | - |
Fixed versions
| 0.19.18 |
Sources
- osv: GHSA-3jvj-v6w2-h948
- https://github.com/LemmyNet/lemmy/security/advisories/GHSA-3jvj-v6w2-h948
- https://nvd.nist.gov/vuln/detail/CVE-2026-42180
- https://github.com/LemmyNet/lemmy/commit/1f06693b708020c5c3a3752bd2f1c6006a75e9bc
- https://github.com/LemmyNet/lemmy
- https://github.com/LemmyNet/lemmy/releases/tag/0.19.18
CVE-2026-42180 · published · modified · JSON