CVE-2026-102877

Name of the Vulnerable Software and Affected Versions Fider versions prior to 0.38.0

Description A server-side request forgery issue exists due to a time-of-check time-of-use (TOCTOU) gap—a race condition where a system checks a condition and then uses the result, but the condition changes between the check and the use—during URL validation for webhooks and custom OAuth provider endpoints. This allows administrators with DNS control to execute DNS rebinding attacks, forcing the server to send unauthorized requests to internal services or cloud metadata endpoints.

Recommendations Update Fider to version 0.38.0 or later.