tag
Node-Js
High
Typebot Unauthenticated Preview-Chat SSRF — CVE-2026-33712
CVE-2026-33712·
Typebot (open-source chatbot builder), preview chat endpoint
patched
High
pdfmake Server-Side Request Forgery via Unvalidated Document URLs (CVE-2026-26801)
CVE-2026-26801·
pdfmake (Node.js PDF generation library), src/URLResolver.js
patched
High
ApostropheCMS Import — Malicious Tar Archive Path Traversal (CVE-2026-32731)
CVE-2026-32731·
ApostropheCMS (site export/import feature)
unpatched