high7.3
CVE-2026-103530
A vulnerability was detected in decolua 9Router up to 0.5.55.
Impact
A vulnerability was detected in decolua 9Router up to 0.5.55. The affected element is the function fetch of the file src/shared/utils/ssrfGuard.js of the component Search Endpoint. Performing a manipulation of the argument provider_options.baseUrl results in server-side request forgery. The attack can be initiated remotely. Applying a patch is the recommended action to fix this issue.
Affected products
| Product | Affected versions |
|---|---|
| Decolua 9Router | before 0.5.55. |
Versions were read from the advisory text. No structured product data has been published for this record yet.