Refly-Ai Refly

2 CVEs affecting Refly-Ai Refly. Latest disclosed: 2026-09-28. Critical: 0, High: 1.

Top CVEs affecting Refly-Ai Refly
CVESeverityScorePublishedSummary
CVE-2026-101052High7.32026-09-28A security vulnerability has been detected in refly-ai refly up to 1.1.0. This issue affects some unknown processing of the file apps/api/src/modules/config/ap…
CVE-2026-91199Medium5.02026-09-14Refly through 1.1.0 contains a server-side request forgery vulnerability in the POST /v1/misc/scrape endpoint that fetches caller-supplied URLs without validat…