utcp-gql SSRF: CVE-2026-44661 fix not applied to the GraphQL and WebSocket plugins
1. Executive summary CVE-2026-44661 is a CWE-918 server-side request forgery vulnerability affecting utcp-gql 1.1.0 and utcp-websocket 1.1.
25 Aug 2026 · 6 min read
read →