fish-island-backend vulnerabilities

CVEs whose affected-version data names the fish-island-backend package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111720Medium· 5.3

yesterday

fish-island-backend through commit 7c61b78 SSRF via /api/web/parse

fish-island-backend through commit 7c61b78 contains an unauthenticated server-side request forgery vulnerability that allows remote attackers to make the server fetch attacker-supplied URLs via the url parameter of GET /api/web/parse. At…

▾ Sunlitlhccong · fish-island-backendvia CVEORG