{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"2.0.12"}],"component":"postiz","cve_ids":[],"ecosystem":"npm","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-89v5-38xr-9m4j","id":"tcs_01M5KFCGNFAFABA0QG20953Y4A","modified_at":"2026-03-27T16:03:30.102739Z","published_at":"2026-03-27T15:47:57Z","references":["https://osv.dev/vulnerability/GHSA-89v5-38xr-9m4j","https://github.com/gitroomhq/postiz-app/security/advisories/GHSA-89v5-38xr-9m4j","https://github.com/gitroomhq/postiz-app/commit/0ad89ccd26b1c387c4f3f3544b18c20d33586466","https://github.com/gitroomhq/postiz-app/commit/be5d871896e97cb1f5a2c9241f156b6a1e1debe8","https://github.com/gitroomhq/postiz-app","https://github.com/gitroomhq/postiz-app/releases/tag/v2.21.2"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-89v5-38xr-9m4j","url":"https://osv.dev/vulnerability/GHSA-89v5-38xr-9m4j"}],"summary":"Postiz has Multiple SSRF Vectors - Webhooks, RSS Feed, URL Loader"}