cwe-918

1 piece of writing

MarSeventh/CloudFlare-ImgBed PR #625 blocked SSRF in fetchRes

MarSeventh/CloudFlare-ImgBed exposed an authenticated server-side URL proxy through fetchRes. PR #625 adds URL validation, private address blocking and redirect revalidation.

15 July 2026