chaskiq vulnerabilities
CVEs whose affected-version data names the chaskiq package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-111663High· 8.6Chaskiq through 2.0.3 SSRF via createUrlUpload GraphQL Mutation
Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to fetch arbitrary URLs via the createUrlUpload GraphQL mutation. Attackers can submit internal URLs, including cloud instan…
▾ Twilightchaskiq · chaskiqvia CVEORG
CVE-2026-111662Medium· 5.8PoCChaskiq through 2.0.3 Unauthenticated SSRF via /oembed Endpoint
Chaskiq through 2.0.3 contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the server fetch arbitrary URLs via the url parameter of the /oembed endpoint. Attackers can target loopback, privat…
▾ Twilightchaskiq · chaskiqvia CVEORG