Skip to content
OpenAdvisories

Package · npm

ssrfcheck

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.2
    CVE-2026-43929

    ssrfcheck: Server-Side Request Forgery (SSRF) and Incomplete List of Disallowed Inputs

    ssrfcheck is a library that checks if a string contains a potential SSRF attack. In 1.3.0 and earlier, ssrfcheck fails to block Server-Side Request Forgery attacks when the target private IP address is encoded as an IPv4-mapped IPv6 address (e.g. http://[::ff…

    felippe-regazio ssrfcheck ssrfcheck npm
  • High 8.2
    CVE-2025-8267

    ssrfcheck: SSRF Bypass Caused by Failure to Classify Reserved IP Address Space as Invalid

    Versions of the package ssrfcheck before 1.2.0 are vulnerable to Server-Side Request Forgery (SSRF) due to an incomplete denylist of IP address ranges. Specifically, the package fails to classify the reserved IP address space 224.0.0.0/4 (Multicast) as invali…

    ssrfcheck npm