CVE-2026-122009 in Dinky
Prediction
by VulDB Data Team • 11/04/2026
A flaw has been found in <a href="/product/datalinkdc:dinky">DataLinkDC Dinky up to 1.2.5</a>. This vulnerability affects the function <code>FlinkWebURITemplateProxyServlet.getNewTargetUri</code> of the file <em>dinky-admin/src/main/java/org/dinky/utils/FlinkWebURITemplateProxyServlet.java</em> of the component <em>flink_web Proxy Endpoint</em>. This manipulation of the argument <em>_authority</em> causes server-side request forgery. The attack can be initiated remotely. The exploit has been published and may be used. The researcher claims to have submitted a GHSA on the repository of the project.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.