firefly-iii firefly-iii

• CVE-2026-71250 Medium 4.3 Firefly III - Webhook URL Validation Explicitly Allows Loopback and Is Bypassable via DNS Rebinding 0.3%
• CVE-2024-37893 Medium 5.9 MFA bypass in oauth flow in Firefly III 0.6%