Executive brief
Idno Vulnerable to Unauthenticated SSRF via URL Unfurl Endpoint
Affected products
- Packagist idno/known
Junglewise Threat Intelligence
CVE-2026-28508: Idno Vulnerable to Unauthenticated SSRF via URL Unfurl Endpoint
CVE-2026-28508 · Severity: medium · CVSS 4 · Published 2026-03-02
Technologies: idno/known (Packagist). Vendors: Packagist.
Related threats
- Idno Vulnerable to Remote Code Execution via Chained Import File Write and Template Path Traversal
- Known affected by Account Takeover via Password Reset Token Leakage
- Known vulnerable to code execution via SVG file in v1.3.1
- Known v1.3.1 Cross-site Scripting
- Known vulnerable to account takeover via host header injection attack in v1.3.1