keephq vulnerabilities

Products

• keep 1

Latest keephq CVEs

Newest publication first

1. CVE-2026-65057 Keep Unauthenticated Server-Side Request Forgery via POST /providers/healthcheck

   Published 2026-07-21

   Critical·CVSS 9.2 EPSS 0.31%

   Keep (commit 91c75e0) contains a server-side request forgery vulnerability that allows unauthenticated attackers to make the backend issue arbitrary HTTP requests by supplying attacker-controlled host values to the unprotected healthcheck endpoint. Attackers can send a crafted JS...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.