CyberSecBulletin

Slab vulnerabilities

We track 2 vulnerabilities in Slab products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 15, 2026.

2vulnerabilities
2critical
0high
0exploited
9.0average CVSS score

Latest Slab vulnerabilities

  • 9.0 Critical severity

    safeurl: Time-of-check Time-of-use (TOCTOU) Race Condition

    CVE-2026-77972Slab

    Time-of-check Time-of-use (TOCTOU) Race Condition in Slab safeurl allows an attacker who controls a hostname's DNS responses to reach internal network destinations that validation rejected. Validation returns a verdict and not the address it approved, so the H

  • 9.0 Critical severity

    safeurl: Not Failing Securely

    CVE-2026-77866Slab

    Server-Side Request Forgery (SSRF) vulnerability in Slab safeurl allows an attacker who controls a validated URL to reach internal network destinations the library is configured to block. Only IPv4 addresses are matched against the reserved ranges and the bloc