Cpe:2.3:a:noncegeek:dim-Sum-App:*:*:*:*:*:*:*:*

A server-side request forgery vulnerability (CVE-2026-94038) in the NonceGeek dim-sum-app Deno backend allows remote attackers to manipulate the supabase_url parameter for unauthorized server-side requests.