OneNav 1.1.0 is vulnerable to Server-Side Request Forgery (SSRF) in custom headers.
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/28xxx/CVE-2025-28096.json", "cna_assigner": "mitre" }