Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Transmute-app
Transmute-app vulnerabilities
Newest
transmute-app
transmute
Transmute has full-read SSRF in URL file import (POST /api/files/url) — no host/IP validation, follows redirects
CVE-2026-54054
6.5
Medium
September 10, 2026
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open