vulnti.work

A security vulnerability has been detected in jina-ai reader up to 1574bfd380d249c86c82db4dace0d9c8fe17e2b1. This issue affects the function isValidTLD of the file /backend/functions/src/cloud-functi…

高危 CVSS 7.3
CVECVE-2026-18647
首次发现2026-08-03 23:15 UTC
披露时间2026-08-03 21:16 UTC
最后更新2026-08-03 23:15 UTC
通道状态auto

摘要

A security vulnerability has been detected in jina-ai reader up to 1574bfd380d249c86c82db4dace0d9c8fe17e2b1. This issue affects the function isValidTLD of the file /backend/functions/src/cloud-functions/crawler.ts of the component Crawler/Puppeteer. The manipulation leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. This product follows a rolling release approach for continuous delivery, so version detail…

中文摘要建设中,暂以英文摘要呈现(DR-003 v2)。

深度研判 · 自动通道

该漏洞尚未生成深度研判报告(DR-003 v2 AI pipeline 建设中)。

数据来源

  • NVD DATABASE

原始链接

时间线

  1. nvd_ingest NVD