CVE-2026-103530

Name of the Vulnerable Software and Affected Versions decolua 9Router versions prior to 0.5.56

Description A server-side request forgery (SSRF) issue exists in the Search Endpoint component. This occurs when the fetch() function within the src/shared/utils/ssrfGuard.js file does not properly handle the provider options.baseUrl variable, allowing a remote attacker to manipulate it to trigger unauthorized requests from the server.

Recommendations Apply a patch to resolve the issue in versions prior to 0.5.56.