Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
@apostrophecms
Ai-helper
@apostrophecms Ai-helper vulnerabilities
@apostrophecms
ai-helper
,
apostrophecms
apostrophe
+1 more
ApostropheCMS: Host header controls server-side image fetch origin in @apostrophecms/ai-helper, enabling authenticated SSRF
CVE-2026-113671
Fix available
4.3
Medium
October 20, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open