CVE-2026-108939Published
EricLBuehler mistral.rs media_source.rs is_global_ip server-side request forgery
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-108939 · Microsoft / collected KEV context
cve-program · CVE-2026-108939
- https://vuldb.com/vuln/416763
- https://vuldb.com/vuln/416763/cti
- https://vuldb.com/cve/CVE-2026-108939
- https://vuldb.com/submit/997600
- https://github.com/EricLBuehler/mistral.rs/commit/cfb8c6a0c
- https://github.com/EricLBuehler/mistral.rs/pull/2446
- https://github.com/EricLBuehler/mistral.rs/commit/cfb8c6a0c42361dc4579a9110b54d339c255b9fd
- https://github.com/EricLBuehler/mistral.rs/releases/tag/v0.9.4
- https://github.com/EricLBuehler/mistral.rs/
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.