high8.5
CVE-2026-51583
An issue in usememos through v0.30.0 allows a remote authenticated attacker to perform Server-Side Request Forgery (SSRF) via the Webhook validation mechanism …
Impact
An issue in usememos through v0.30.0 allows a remote authenticated attacker to perform Server-Side Request Forgery (SSRF) via the Webhook validation mechanism in internal/webhook/validate.go, by setting a webhook target to an internal address.
Affected products
| Product | Affected versions |
|---|---|
| Usememos | through 0.30.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.