GHSA-vj2p-7pgw-g2wf Postiz App has a High-Severity SSRF Vulnerability via Next.js
An SSRF vulnerability in Postiz App allows attackers to access internal network services and cloud metadata, potentially leaking credentials.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not stated
- Fix
- None listed
What is GHSA-vj2p-7pgw-g2wf?
GHSA-vj2p-7pgw-g2wf is a server-side request forgery vulnerability in postiz, published on 27 Mar 2026. It can be exploited over the network.
Official description
Impact
A successful SSRF attack allows an attacker to:
- Bypass firewalls to scan and interact with internal network services/ports.
- Access sensitive cloud metadata services (e.g., AWS IMDS 169.254.169.254) to potentially leak instance credentials.
- Pivot into the internal network environment where Postiz is hosted.
Workarounds
There are no workarounds known to this, please upgrade to Postiz version v2.21.1.
Which versions are affected by GHSA-vj2p-7pgw-g2wf?
2 open source packages ship an affected version, including postiz.
| Package | Affected | Fixed in |
|---|---|---|
postiz npm | All versions to 2.0.12 | None |
postiz npm | All versions to 2.0.12 | None |
How do I fix GHSA-vj2p-7pgw-g2wf?
No fix has been published for GHSA-vj2p-7pgw-g2wf yet. Limit exposure of the affected software until one is available.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is GHSA-vj2p-7pgw-g2wf being exploited?
There is no known exploitation of GHSA-vj2p-7pgw-g2wf in the wild and no public exploit code.