Vulnerabilities

A vulnerability was identified in leomoon-studios wiki-go up to 1.9.1.

A vulnerability was identified in leomoon-studios wiki-go up to 1.9.1. This impacts an unknown function of the file internal/handlers/metadata_api.go of the component fetch-metadata Endpoint. Such manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit is publicly available and might be used. Upgrading to version 1.9.2 will fix this issue. The name of the patch is 25498ebf5c012b870967e38eec2a1e5133fa1a83. Upgrading the affected component is recommended.

Read at NIST National Vulnerability Database (CVE API 2.0)

Vendor

Apple

Product

ios

CVSS

4.3

EPSS

0.002 (p15)

Exploitation

public exploit code reported

Exposure class

Mobile OS

• NIST National Vulnerability Database (CVE API 2.0) (nvd.nist.gov)
• CVE-2026-114374 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 8
   CVE NVD 10d ago

   A weakness has been identified in leomoon-studios wiki-go up to 1.9.1.

   CVSS 6.3 CVE-2026-114376 Apple