https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T21:47:37.658831+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-31132 CVE-2022-31132 — Unauthenticated SSRF in 3rd party module "cerdic/csstidy" 2026-10-07T21:47:37.674146+00:00

Affected: nextcloud security-advisories

Nextcloud Mail is an email application for the nextcloud personal cloud product. Affected versions shipped with a CSS minifier on the path `./vendor/cerdic/css-tidy/css_optimiser.php`. Access to the minifier is unrestricted and access may lead to Server-Side Request Forgery (SSRF). It is recommendet to upgrade to Mail 1.12.7 or Mail 1.13.6. Users unable to upgrade may manually delete the file located at `./vendor/cerdic/css-tidy/css_optimiser.php`