CVE-2026-50888

Description

An authenticated Server-Side Request Forgery (SSRF) in the custom scraper subsystem component of Benjamin Jonard Koillection v1.8.0 allows attackers to scan internal resources via supplying a crafted URL.

References

• https://gist.github.com/pyuysig/d60273c1c346257ceddbf8da7134bae7