Skip to content
OpenAdvisories

Package · PyPI

opencve

1 known vulnerabilities.

1 result · Feed

  • Medium 6.5

    OpenCVE: Server-Side Request Forgery (SSRF) in notifications

    OpenCVE is a vulnerability intelligence platform. Prior to 3.0.0, OpenCVE notification testing for Webhook and Slack integrations does not sufficiently validate user-supplied HTTP or HTTPS destinations. An authenticated user with permission to configure notif…