Capt

**Name of the Vulnerable Software and Affected Versions** decolua 9Router versions prior to 0.5.56 **Description** A server-side request forgery (SSRF) issue exists in the Search Endpoint component. This occurs when the `fetch()` function within the `src/shared/utils/ssrfGuard.js` file does not properly handle the `provider options.baseUrl` variable, allowing a remote attacker to manipulate it to trigger unauthorized requests from the server. **Recommendations** Apply a patch to resolve the issue in versions prior to 0.5.56.

**Name of the Vulnerable Software and Affected Versions** vas3k TaxHacker versions prior to 0.8.6 **Description** An issue exists in the Invoice PDF Renderer component within the `generateInvoicePDF()` function located in the `/apps/invoices/actions.ts` file. A remote attacker can perform server-side request forgery (SSRF)—a technique that allows an attacker to induce the server-side application to make requests to an unintended location—by manipulating the `businessLogo` argument. **Recommendations** As a temporary workaround, restrict the use of the `businessLogo` argument within the `generateInvoicePDF()` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** vas3k TaxHacker versions prior to 0.8.6 **Description** A remote server-side request forgery (SSRF) exists in the `testLLMProviderAction()` function within the `app/(app)/apps/settings/actions.ts` file. This occurs when the `provider`, `apiKey`, `model`, or `baseUrl` arguments are manipulated, allowing an attacker to induce the server to make unauthorized requests. **Recommendations** As a temporary workaround, restrict access to the `testLLMProviderAction()` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** samanhappy MCPHub versions prior to 1.0.33 **Description** Improper privilege management exists within the Template Import Endpoint. The issue resides in the `importTemplate()` function located in the `src/services/templateService.ts` file, allowing for remote exploitation. **Recommendations** Upgrade to version 1.0.33. As a temporary mitigation, restrict access to the `importTemplate()` function.