CVE-2026-58418

15th percentile — higher than 15% of all known CVEs

An SSRF (Server-Side Request Forgery) vulnerability exists during repository migration when the application follows HTTP redirects. An attacker can exploit this to send requests to internal network resources.

The risk involves potential scanning of internal networks, access to sensitive data or services not publicly exposed, which could lead to attack escalation.

It is recommended to restrict or disable following HTTP redirects during repository migration and validate target URLs before making requests.