org.apache.fesod:fesod-sheet vulnerabilities

CVEs whose affected-version data names the org.apache.fesod:fesod-sheet package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-107460Critical· 9.1

3w ago

Server-Side Request Forgery (SSRF) protection in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet 2.0.2-incubating can be bypassed through DNS rebinding

Server-Side Request Forgery (SSRF) protection in the UrlImageConverter component of Apache Fesod (Incubating) fesod-sheet 2.0.2-incubating can be bypassed through DNS rebinding. When an application accepts an attacker-controlled image UR…

▾ MidnightApache Software Foundation · org.apache.fesod:fesod-sheetEPSS 0.41%via NVD