benotes vulnerabilities

CVEs whose affected-version data names the benotes package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-116224Medium· 4.3

today

fr0tt benotes Bookmark Metadata Endpoint PostController.php getUrlInfo server-side request forgery

A vulnerability has been found in fr0tt benotes up to 2.8.1. This affects the function getUrlInfo of the file app/Http/Controllers/PostController.php of the component Bookmark Metadata Endpoint. The manipulation of the argument url leads…

▾ Sunlitfr0tt · benotesvia CVEORG