GHSA-6mwv-4mrm-5p3mPublished
9Router: Kiro region injection allows authenticated SSRF with Authorization header forwarding
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-56678 · Microsoft / collected KEV context
cve-program · CVE-2026-56678
- https://github.com/decolua/9router/security/advisories/GHSA-6mwv-4mrm-5p3m
- https://github.com/decolua/9router/commit/126aa244c5b51b74ab8c7594e3418fcf4437bf6f
- https://github.com/decolua/9router/releases/tag/v0.5.6
nvd · CVE-2026-56678
- https://github.com/decolua/9router/commit/126aa244c5b51b74ab8c7594e3418fcf4437bf6f
- https://github.com/decolua/9router/releases/tag/v0.5.6
- https://github.com/decolua/9router/security/advisories/GHSA-6mwv-4mrm-5p3m
osv · GHSA-6mwv-4mrm-5p3m
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.