refly-ai refly

• CVE-2026-101052 High 7.3 refly-ai refly JWT Token app.config.ts hard-coded credentials 0.3%
• CVE-2026-91199 Medium 5.0 Refly through 1.1.0 Server-Side Request Forgery via scrape endpoint 0.3%