CVE-2026-116069: Site Evidence Ts Cwe 918 Cve 2026 116069cve-2026-116069-site-evidence-ts-cwe-918-cve-2026-116069
Server-side fetch() with redirect: "follow" on a non-literal URL performs an outbound request with no destination-host restriction. When the URL is derived from request data (e.g. a user-submitted domain), an attacker can make the server fetch loopback, private-network, or link-local/cloud-metadata addresses, and redirect: "follow" additionally lets a public
