Skip to content
Threat Feed
Subscribe

Vendor

NonceGeek

1 brief RSS
high advisory

SSRF Vulnerability in NonceGeek dim-sum-app

A server-side request forgery vulnerability (CVE-2026-94038) in the NonceGeek dim-sum-app Deno backend allows remote attackers to manipulate the supabase_url parameter for unauthorized server-side requests.

dim-sum-app
1t 1c