Ttransmute-app

Products

Exploited and recent CVEs

• CVE-2026-54054 Medium 6.5 Transmute has full-read SSRF in URL file import (POST /api/files/url) — no host/IP validation, follows redirects 0.4%