CVE-2026-119709 | goniszewski Grimoire prior 1.0.0 Post /api/fetch-metadata getMetadata server-side request forgery

October 30, 2026 Yanac

A vulnerability, which was classified as problematic, was found in goniszewski Grimoire. This affects the function getMetadata of the file /api/fetch-metadata of the component Post Handler. Such manipulation leads to server-side request forgery.

This vulnerability is referenced as CVE-2026-119709. It is possible to launch the attack remotely. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More