CVE record · 1 source
CVE-2026-57569
Lychee is a free, open-source photo-management tool.
- Product
- Media servers
- Exposure class
- Collaboration
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
Lychee is a free, open-source photo-management tool.
Lychee is a free, open-source photo-management tool. Prior to 7.6.0, the POST /api/v2/Photo::fromUrl flow validates a hostname and its resolved addresses in app/Rules/PhotoUrlRule.php but later passes the original hostname…