CVE-2026-57448 | mrblomblo Bombooru up to 1.39.x Proxy Image booru_import.py proxy_image url redirect

October 29, 2026 Yanac

A vulnerability identified as problematic has been detected in mrblomblo Bombooru up to 1.39.x. Affected by this vulnerability is the function proxy_image of the file backend/app/routes/booru_import.py of the component Proxy Image. Performing a manipulation of the argument url results in open redirect.

This vulnerability is identified as CVE-2026-57448. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More