cog vulnerabilities

1 known vulnerability in cog from Replicate. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.3 Critical severity

  cog: Server-Side Request Forgery

  CVE-2026-56712Nov 9, 2026Replicate

  Replicate Cog through 0.23.1 contains a server-side request forgery vulnerability that allows attackers to cause the Cog process to make server-side HTTP requests by submitting prediction inputs with attacker-controlled URLs that are not validated against the