CVE-2026-49328
1 advisory.
Maven/org.apache.fesod:fesod-sheet CVE-2026-49328: medium 5.3
Apache Fesod is vulnerable to Server-Side Request Forgery through its UrlImageConverter component
Action: Upgrade org.apache.fesod:fesod-sheet to 2.0.2-incubating or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.0.2-incubating | - |
Fixed versions
| 2.0.2-incubating |
Sources
- osv: GHSA-vqc2-c9jh-3jjv
- https://nvd.nist.gov/vuln/detail/CVE-2026-49328
- https://github.com/apache/fesod/pull/917
- https://fesod.apache.org/docs/download
- https://github.com/apache/fesod
- https://github.com/apache/fesod/releases/tag/2.0.2-incubating
- https://lists.apache.org/thread/c1pb5b66h02p9tlrnfbwcgcz85v16fkj
- http://www.openwall.com/lists/oss-security/2026/06/01/4
CVE-2026-49328 · published · modified · JSON