Skip to content

Papra HTTP redirect bypass can lead to SSRF via webhook delivery system

Low severity GitHub Reviewed Published May 20, 2026 in papra-hq/papra

No open alerts for this advisory

Give feedback on Dependabot alerts