| Package | Affected versions | Patched versions |
|---|---|---|
| homarr | < 1.54.0 | 1.54.0 |
Homarr is an open-source dashboard. Prior to version 1.54.0, an unauthenticated Server-Side Request Forgery (SSRF) vulnerability allows a remote attacker to force the Homarr server to perform arbitrary outbound HTTP requests. This can be used as an internal network access primitive (e.g., reaching loopback/private ranges) from the Homarr host/container network context. This issue has been patched in version 1.54.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free