Skip to content

Karakeep SDK has SSRF via metascraper-logo-favicon that bypasses validateUrl protections

High severity GitHub Reviewed Published May 8, 2026 in karakeep-app/karakeep • Updated May 14, 2026

No closed alerts for this advisory

Give feedback on Dependabot alerts