Skip to content
OpenAdvisories

Package · PyPI

safeurl-python

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Low —
    GHSA-373w-rj84-pv6x

    SafeURL-Python's hostname blocklist does not block FQDNs

    ### Description If a hostname was blacklisted, it was possible to bypass the blacklist by requesting the FQDN of the host (e.g. adding `.` to the end). ### Impact The main purpose of this library is to block requests to internal/private IPs and these cannot b…

    safeurl-python PyPI
  • Medium 5.3
    CVE-2023-24622

    safeurl-python contains Server-Side Request Forgery

    isInList in the safeurl-python package before 1.2 for Python has an insufficiently restrictive regular expression for external domains, leading to SSRF.

    safeurl-python PyPI