Product
A server-side request forgery vulnerability (CVE-2026-94038) in the NonceGeek dim-sum-app Deno backend allows remote attackers to manipulate the supabase_url parameter for unauthorized server-side requests.