Vendor
MegaParse version 0.0.55 contains an unauthenticated server-side request forgery vulnerability in the POST /v1/url endpoint, allowing attackers to access internal resources and cloud metadata.