Vulnerabilities in Slab

3 results

CVE-2026-77866CRITICALSSRF protection bypass in safeurl via IPv6 addresses and unresolvable hostsEPSS 0.5%CVE-2026-77972CRITICALsafeurl validated address is not bound to the request, allowing DNS rebindingEPSS 0.3%CVE-2025-15056MEDIUMQuill 2.0.3 - Lack of data validation in HTML export allowing XSSEPSS 0.3%