Skip to content
OpenAdvisories

Package · npm

@misskey-dev/summaly

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    GHSA-jqx4-9gpq-rppm

    @misskey-dev/summaly allows IP Filter Bypass via Redirect

    ### Summary Due to a validation error in `got.scpaping`, it is possible to use an HTTP redirect to avoid IP filtering. ### Details In `got.scpaping`, Summaly first makes a HTTP `HEAD` request to the page being summarized. It then preforms private IP address c…

    @misskey-dev/summaly npm