CVE-2021-27329: Frendi Frendica

Critical severity, CVSS 10.0. EPSS: 1.5% chance of exploitation in the next 30 days.

Friendica 2021.01 allows SSRF via parse_url?binurl= for DNS lookups or HTTP requests to arbitrary domain names.

Affected products

• Frendi Frendica: version 2021.01 only

Published 2021-02-18. Last modified 2026-06-17.