CVE-2026-48051
1 advisory.
npm/@papra/webhooks CVE-2026-48051: low 3.5
Papra HTTP redirect bypass can lead to SSRF via webhook delivery system
Action: Upgrade @papra/webhooks to 0.3.3 or later.
npm i @papra/webhooks@0.3.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.3.3 | - |
Fixed versions
| 0.3.3 |
Sources
- osv: GHSA-5g86-85rp-f9hx
- https://github.com/papra-hq/papra/security/advisories/GHSA-5g86-85rp-f9hx
- https://github.com/papra-hq/papra/commit/086dccbfda18c850bee50b94c48f5f110be6935c
- https://github.com/papra-hq/papra
CVE-2026-48051 · published · modified · JSON