CVE-2026-63313 | decolua 9router up to 0.4.71 URL Validation /v1/web/fetch url server-side request forgery

A vulnerability identified as critical has been detected in decolua 9router up to 0.4.71. This vulnerability affects unknown code of the file /v1/web/fetch of the component URL Validation. This manipulation of the argument url causes server-side request forgery.

This vulnerability is registered as CVE-2026-63313. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.