Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2021-02-23	CVE-2020-8902	Server-Side Request Forgery (SSRF) vulnerability in Google Rendertron Rendertron versions prior to 3.0.0 are are susceptible to a Server-Side Request Forgery (SSRF) attack. network low complexity google CWE-918	4.3
2018-12-17	CVE-2017-18352	Cross-site Scripting vulnerability in Google Rendertron 1.0.0 Error reporting within Rendertron 1.0.0 allows reflected Cross Site Scripting (XSS) from invalid URLs. network low complexity google CWE-79	6.1