Vulnerabilities in umputun

2 results
CVE-2026-48788HIGHRemark42: Cross-Site Scripting (XSS) on /api/v1/img via content-type spoofingEPSS 0.3%CVE-2026-77463MEDIUMRemark42: Rate limit bypass via unconditional trust of X-Forwarded-For/X-Real-IP headers in direct-internet deploymentEPSS 0.2%