siga vulnerabilities

1 known vulnerability in siga from Projeto-siga. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  siga: Server-Side Request Forgery

  CVE-2026-86273Sep 7, 2026Projeto-siga

  A weakness has been identified in projeto-siga siga up to 11.1.1. Affected by this issue is the function DownloadExterno.getUrl of the file sigaex/src/main/java/br/gov/jfrj/siga/vraptor/ExUtilController.java of the component HTML-to-PDF Endpoint. This manipula