HarnessRouter CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM HarnessRouter CVE published 2026-10-21

CVE-2026-114362

A server-side request forgery vulnerability has been identified in HarnessRouter up to version 0.31.12. This issue, located in the Targets Test Endpoint within the file gateway/app.py, allows for a manipulation of the argument base_url, potentially leading to security risks. The vulnerability has been addressed with the release of version 0.31.13, which includes a patch (1c4b1fc1f89737dabd089ac1d1c174a57f [truncated]