CVE-2026-42180 | LemmyNet lemmy up to 0.19.17 HTTP Request /api/v3/post server-side request forgery

A vulnerability has been found in LemmyNet lemmy up to 0.19.17 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /api/v3/post of the component HTTP Request Handler. The manipulation leads to server-side request forgery.

This vulnerability is documented as CVE-2026-42180. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.