Skip to content
OpenAdvisories

Package · Go

github.com/doyensec/safeurl

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.3
    CVE-2026-54452

    safeurl: Missing IPv6 CIDR Ranges in Blocklist

    safeurl is a server-side request forgery protection library. Prior to 0.2.4, the privateNetworks list in ip.go omits the IPv6 ranges 64:ff9b:1::/48, 5f00::/16, 3fff::/20, and 100:0:0:1::/64. When an application enables IPv6 with EnableIPv6(true), an attacker-…

    doyensec safeurl github.com/doyensec/safeurl Go