SSRF in Pivotick
CVE-2026-67173
Pivotick did not validate the URL scheme of node imagePath values derived from graph data before assigning them to SVG image resources. An attacker able to supply crafted graph data could set an image path to a malicious URI. When a victi…
Vulnerability class: SSRF (Server-Side Request Forgery)
Affected products
- Pivotick — versions 0