CVE Intelligence

Progress Software @progress/sitefinity-nextjs-sdk vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Progress Software @progress/sitefinity-nextjs-sdk: 1 record(s), with affected versions and fixes.

CVE-2026-92931 High · 8.8 CWE-918 Oct 5, 2026
CWE-918: Server-Side Request Forgery in the Progress Sitefinity Next.js Renderer SDK
CWE-918: Server-Side Request Forgery in the Progress @progress/sitefinity-nextjs-sdk npm package versions 15.1.8326 through 15.4.8637 may allow a remote attacker to make server-side requests to an attacker-controlled host, potentially exposing sensitive information.