tibillet vulnerabilities

Products

• lespass 1

Latest tibillet CVEs

Newest publication first

1. CVE-2026-112358 TiBillet Lespass APIv1 serializers.py get_img_from_url server-side request forgery

   Published 2026-10-19

   Low·CVSS 2.1 EPSS 0.36%

   A weakness has been identified in TiBillet Lespass up to 10e87909c5d526dffa6d424c104fc12860740537. This vulnerability affects the function get_img_from_url of the file ApiBillet/serializers.py of the component APIv1. Executing a manipulation of the argument img_url/image_url can...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.