Shlinkio Shlink
3 CVEs affecting Shlinkio Shlink. Latest disclosed: 2026-08-03. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-18737 | Medium | 6.5 | 2026-08-03 | Shlink contains a blind SQL injection vulnerability that allows any authenticated API key holder to inject arbitrary SQL fragments by supplying an unvalidated… |
CVE-2026-18736 | Medium | 5.0 | 2026-08-03 | Shlink contains a server-side request forgery vulnerability that allows authenticated API key holders to cause the server to issue arbitrary HTTP GET requests… |
CVE-2026-18738 | Medium | 4.7 | 2026-08-03 | Shlink versions 5.0.0 through 5.1.5 contain a CSV formula injection vulnerability that allows unauthenticated remote attackers to plant spreadsheet formulas in… |