https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-01T07:04:27.303329+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-102877 CVE-2026-102877 — Fider before 0.38.0 SSRF via DNS rebinding in webhook validation 2026-10-01T07:04:27.304541+00:00

Affected: getfider fider

Fider before 0.38.0 contains a server-side request forgery vulnerability due to a time-of-check time-of-use gap in URL validation for webhooks and custom OAuth provider endpoints. Administrators controlling DNS can perform DNS rebinding attacks to make the Fider server send requests to internal services or cloud metadata endpoints.