Stringer-rss vulnerabilities
We track 1 vulnerability in Stringer-rss products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 28, 2026.
1vulnerabilities
0critical
1high
0exploited
7.6average CVSS score
Latest Stringer-rss vulnerabilities
- 7.6 High severity
stringer: Server-Side Request Forgery
Stringer is a self-hosted, anti-social RSS reader. Prior to commit 75cb095, an unrestricted Server-Side Request Forgery (SSRF) vulnerability allows any authenticated user to force the Stringer server to send arbitrary HTTP/HTTPS requests to internal networks,