modules vulnerabilities

CVEs whose affected-version data names the modules package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-112991Medium· 6.3

yesterday

MISP html_to_markdown Module SSRF via Incomplete IP Range Blocking in is_safe_url()

The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its is_safe_url() URL validation function. The BLOCKED_RANGES list used to reject unsafe destination addresses was incom…

▾ SunlitMISP · MISP Modulesvia CVEORG