Pig-Tail

SurrealDB before 3.1.5 contains a server-side request forgery vulnerability in the JWKS fetcher that follows HTTP redirects without re-validating redirect targets against network capabilities. Attackers with Owner role can configure a JWKS URL pointing to an allowlisted host that redirects to blocked internal addresses, bypassing network access controls.

**Name of the Vulnerable Software and Affected Versions** Traefik versions prior to 2.11.51 Traefik versions prior to 3.6.22 Traefik versions prior to 3.7.6 **Description** The ForwardAuth middleware in this HTTP reverse proxy and load balancer incorrectly derives the `X-Forwarded-Port` header sent to the authentication service from the original incoming request rather than the sanitized forwarded request, even when `trustForwardHeader` is set to `false`. This allows an unauthenticated remote attacker to inject an `X-Forwarded-Proto: https` header via a plain HTTP connection, leading the system to forward `X-Forwarded-Port: 443` to the authentication service and bypass port-based authorization checks. **Recommendations** Update to version 2.11.51. Update to version 3.6.22. Update to version 3.7.6.

**Name of the Vulnerable Software and Affected Versions** webpack-dev-server versions prior to 5.2.6 **Description** Internal developer endpoints '/webpack-dev-server/open-editor' and '/webpack-dev-server/invalidate' perform state-changing actions on GET requests without verifying the request origin. This allows any website visited by a developer to trigger these endpoints cross-origin. An attacker can open arbitrary local files in the developer's editor, including those outside the project root. Additionally, repeated requests can spawn multiple editor processes and force recompilations, leading to system performance degradation. **Recommendations** Upgrade to webpack-dev-server 5.2.6.