TheLibrarian vulnerabilities
We track 1 vulnerability in TheLibrarian products across 2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 16, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest TheLibrarian vulnerabilities
- 7.5 High severity
TheLibrarian.io: Server-Side Request Forgery
The Librarian contains an internal port scanning vulnerability, facilitated by the `web_fetch` tool, which can be used with SSRF-style behavior to perform GET requests to internal IP addresses and services, enabling scanning of the Hertzner cloud environment t