fider vulnerabilities

2 known vulnerabilities in fider from Getfider. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  fider: Server-Side Request Forgery

  CVE-2026-65967Nov 11, 2026Getfider

  Fider is a feedback portal for feature requests and suggestions. Prior to version 0.34.0, a Server-Side Request Forgery (SSRF) vulnerability exists in Fider due to insufficient validation of webhook URLs. The application allows user-controlled URLs to be fetch

• 9.6 Critical severity

  fider: Authorization Bypass Through User-Controlled Key

  CVE-2026-65840Nov 11, 2026Getfider

  Fider is a feedback portal for feature requests and suggestions. Prior to version 0.36.0, in multi-tenant mode (HOST_MODE=multi), an attacker can use an email verification key issued by Tenant A to authenticate as the same email address on Tenant B. This compl