Skip to content
OpenAdvisories

Package · PyPI

safeurl-python

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low —
    GHSA-373w-rj84-pv6x

    SafeURL-Python's hostname blocklist does not block FQDNs

    ### Description If a hostname was blacklisted, it was possible to bypass the blacklist by requesting the FQDN of the host (e.g. adding `.` to the end). ### Impact The main purpose of this library is to block requests to internal/private IPs and these cannot b…

    safeurl-python PyPI