Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

ideon — Vulnerabilities & Security Advisories 4

All 4 CVE vulnerabilities found in ideon, with AI-generated Chinese analysis, references, and POCs.

Vendor: 3xpyth0n

CVE ID Title CVSS Severity Published
CVE-2026-103980 ideon: SSRF protection bypass via IPv6 transition addresses (NAT64 / 6to4 / IPv4-mapped) in link preview CWE-918 7.1 High 2026-11-11
CVE-2026-68507 ideon: Unauthenticated /api/links/preview endpoint is an open SSRF relay, and its IP blocklist misses the 0.0.0.0/:: unspecified-address bypass CWE-306 6.9 Medium 2026-11-11
CVE-2026-65968 ideon: Unauthenticated SSRF in /api/proxy/image via WHATWG bracketed/hex-mapped IPv6 bypass of isSafeUrl guard CWE-918 5.3 Medium 2026-11-11
CVE-2026-65965 ideon: Read-only project viewers can wipe and rewrite the canvas and tamper with blocks/files via role-unchecked project endpoints CWE-285 8.7 High 2026-11-11

All 4 known CVE vulnerabilities affecting ideon with full Chinese analysis, references, and POCs where available.