News · via oss-security
CVE-2026-107460: Apache Fesod (Incubating): UrlImageConverter SSRF protection bypass via DNS rebinding
Posted by Shuxin Pan on Oct 13 Severity: moderate Affected versions: - Apache Fesod (Incubating) 2.0.2-incubating Description: Server-Side Request Forgery (SSRF) protection in the UrlImageConverter…