Junglewise Threat Intelligence

CVE-2026-33182: Saloon is vulnerable to SSRF and credential leakage via absolute URL in endpoint overriding base URL

CVE-2026-33182 · Severity: medium · CVSS 4 · Published 2026-03-25

Technologies: saloonphp/saloon (Packagist). Vendors: Packagist.

Executive brief

Saloon is vulnerable to SSRF and credential leakage via absolute URL in endpoint overriding base URL

Affected products

  • Packagist saloonphp/saloon

Related threats