Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
scalar/astro v0.1.13 was discovered to contain a Server-Side Request Forgery (SSRF) in the scalar_url query parameter of the Scalar Proxy endpoint. This vulnerability allows unauthenticated attackers to force the backend server to send HTTP requests to attacker-controlled URLs, leading to authentication cookies and headers exposure and possible privilege escalation.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-05-18 | 1 | General1 |
| 2026-05-20 | 1 | Disclosure1 |
CVE-2026-30118 scalar/astro v0.1.13 was discovered to contain a Server-Side Request Forgery (SSRF) in the scalar_url query parameter of the Scalar Proxy endpoint. This vulnerability… https://www.cve.org/CVERecord?id=CVE-2026-30118
Post summary
The text announces CVE-2026-30118 as an SSRF vulnerability in Scalar/astro v0.1.13, providing basic technical details but no PoC, exploit, patch, or evidence of active exploitation.
CVE-2026-30118 CVE-2026-30118 — SSRF in scalar/astro Proxy Endpoint CVE https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-30118
Post summary
The provided text is a brief listing that identifies CVE‑2026‑30118 as an SSRF flaw in the scalar/astro Proxy Endpoint, but it lacks additional details such as PoC, exploit code, active exploitation, or patch information.