Vulnerabilities in decolua
26 resultsCVE-2026-55641HIGH9router: Unauthenticated `/v1` proxy access via `Host`-header spoofing → open AI relay + SSRFEPSS 0.3%CVE-2026-103530MEDIUMdecolua 9Router Search Endpoint ssrfGuard.js fetch server-side request forgeryEPSS 0.3%CVE-2026-10269MEDIUMdecolua 9router HTTP Header dashboardGuard.js isAuthenticated improper authorizationEPSS 0.3%CVE-2026-108593HIGH9router 0.4.1 through 0.5.99 Config Injection RCE via hermes-settings EndpointEPSS 0.3%CVE-2026-56678MEDIUM9Router: Kiro region injection allows authenticated SSRF with Authorization header forwardingEPSS 0.2%CVE-2026-56676HIGH9router: Image prefetch DNS rebinding allows SSRF to internal servicesEPSS 0.2%