All vulnerabilities

Servers and applications

GHSA-cw34-7fm4-63g6

Unauthenticated SSRF via unguarded remote-storage callers in filer and S3 gateway

Severity
Critical 9.3
Published
9 Nov 2026
Last changed
9 Nov 2026
Added to UpHeron
9 Nov 2026
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
SeaweedFSServers and applications · github:seaweedfs/seaweedfs
  • Every version up to 4.44

References