{"action":"Upgrade nl.nl-portal:form to 3.0.4 or later.","affected":[{"fixed":"3.0.4","introduced":"1.1.0"}],"component":"nl.nl-portal:form","cve_ids":["CVE-2026-55414"],"ecosystem":"Maven","epss":0.00437,"exploited":false,"fixed_versions":["3.0.4"],"ghsa_id":"GHSA-xm3x-9cfw-jhx4","id":"tcs_01M5N9JJEBEDV6HQXSDHH9HJCD","modified_at":"2026-06-19T14:41:30.406187Z","published_at":"2026-06-19T14:17:18Z","references":["https://osv.dev/vulnerability/GHSA-xm3x-9cfw-jhx4","https://github.com/nl-portal/nl-portal-backend-libraries/security/advisories/GHSA-xm3x-9cfw-jhx4","https://github.com/nl-portal/nl-portal-backend-libraries/pull/700","https://github.com/nl-portal/nl-portal-backend-libraries"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-xm3x-9cfw-jhx4","url":"https://osv.dev/vulnerability/GHSA-xm3x-9cfw-jhx4"}],"summary":"NL Portal Backend Libraries: Unauthenticated form resolver forwards the privileged Objecten-API token to a caller-supplied URL (SSRF)"}