niubigeo vulnerabilities

CVEs whose affected-version data names the niubigeo package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-116069Medium· 6.5

1w ago

NiubiGEO before 0.3.2 Unauthenticated SSRF via /audit-plan domain Field

NiubiGEO before 0.3.2 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch internal addresses by supplying a crafted domain value to POST /audit-plan. Attackers can s…

▾ SunlitAlbert-Weasker · niubigeoEPSS 0.26%via CVEORG