OPeNDAP Inc. Hyrax-docker vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting OPeNDAP Inc. Hyrax-docker: 1 record(s), with affected versions and fixes.

CVE-2026-16637 Medium · 6.5 CWE-201 Aug 7, 2026

OPeNDAP Hyrax SSRF and Credential Disclosure via Unvalidated Redirects

OPeNDAP Hyrax allows SSRF and credential disclosure via unvalidated HTTP redirects that bypass the AllowedHosts allowlist and leak Earthdata headers (User-Id, Echo-Token) to attacker-controlled endpoints.