Skip to content
OpenAdvisories

Package · Hex

safeurl

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.0
    CVE-2026-77866

    SSRF protection bypass in safeurl via IPv6 addresses and unresolvable hosts

    Server-Side Request Forgery (SSRF) vulnerability in Slab safeurl allows an attacker who controls a validated URL to reach internal network destinations the library is configured to block. Only IPv4 addresses are matched against the reserved ranges and the blo…

    Slab safeurl safeurl Hex
  • Critical 9.0
    CVE-2026-77972

    safeurl validated address is not bound to the request, allowing DNS rebinding

    Time-of-check Time-of-use (TOCTOU) Race Condition in Slab safeurl allows an attacker who controls a hostname's DNS responses to reach internal network destinations that validation rejected. Validation returns a verdict and not the address it approved, so the …

    Slab safeurl safeurl Hex