CVE-2026-47170 | garlic-signage garlic-hub up to 1.0 uploadFromUrl Endpoint server-side request forgery (GHSA-x24v-76hr-989r)

June 11, 2026 Yanac

A vulnerability has been found in garlic-signage garlic-hub up to 1.0 and classified as critical. This issue affects some unknown processing of the component uploadFromUrl Endpoint. This manipulation causes server-side request forgery.

The identification of this vulnerability is CVE-2026-47170. It is possible to initiate the attack remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More