Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Getty Images Getty Images allows attackers to make unauthorized requests on your behalf

CVE-2026-39630
Summary

Getty Images has a security issue that allows attackers to trick your server into making requests to unintended websites. This could lead to data theft or other malicious activity. Update Getty Images to version 4.1.1 or later to fix this issue.

Original title
Server-Side Request Forgery (SSRF) vulnerability in Getty Images Getty Images getty-images allows Server Side Request Forgery.This issue affects Getty Images: from n/a through <= 4.1.0.
Original description
Server-Side Request Forgery (SSRF) vulnerability in Getty Images Getty Images getty-images allows Server Side Request Forgery.This issue affects Getty Images: from n/a through <= 4.1.0.
Vulnerability type
CWE-918 Server-Side Request Forgery (SSRF)
Published: 8 Apr 2026 · Updated: 9 Apr 2026 · First seen: 8 Apr 2026