Skip to content
OpenAdvisories

Package · crates.io

webpage

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    GHSA-23hp-j76v-pcwj

    SSRF and local file disclosure via unvalidated URLs

    Applications that pass attacker-controlled URLs to `webpage` versions before 2.1.0 may be vulnerable to server-side request forgery (SSRF) or local file disclosure. `HTTP::fetch` and `Webpage::from_url` passed URLs to libcurl without restricting the URL schem…

    webpage crates.io