CVE-2026-112991 | MISP Modules up to 3.0.12 html_to_markdown is_safe_url server-side request forgery

October 20, 2026 Yanac

A vulnerability categorized as problematic has been discovered in MISP Modules up to 3.0.12. This affects the function is_safe_url of the component html_to_markdown. The manipulation results in server-side request forgery.

This vulnerability is identified as CVE-2026-112991. The attack can be executed remotely. There is not any exploit available.

It is advisable to implement a patch to correct this issue.VulDB Recent EntriesRead More