Skip to content
OpenAdvisories

Package · npm

@misskey-dev/summaly

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.3
    GHSA-jqx4-9gpq-rppm

    @misskey-dev/summaly allows IP Filter Bypass via Redirect

    ### Summary Due to a validation error in `got.scpaping`, it is possible to use an HTTP redirect to avoid IP filtering. ### Details In `got.scpaping`, Summaly first makes a HTTP `HEAD` request to the page being summarized. It then preforms private IP address c…

    @misskey-dev/summaly npm
  • Low 2.1
    CVE-2025-46553

    @misskey-dev/summaly Redirect Filter Bypass

    @misskey-dev/summaly is a tool for getting a summary of a web page. Starting in version 3.0.1 and prior to version 5.2.1, a logic error in the main `summaly` function causes the `allowRedirects` option to never be passed to any plugins, and as a result, isn't…

    misskey-dev summaly @misskey-dev/summaly npm