Skip to content

Transmute-app Transmute vulnerabilities

transmute-app transmuteTransmute has full-read SSRF in URL file import (POST /api/files/url) — no host/IP validation, follows redirectsCVE-2026-540546.5 MediumSeptember 10, 2026