Skip to content
OpenAdvisories

Vendor

felippe-regazio

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • High 8.2

    ssrfcheck: Server-Side Request Forgery (SSRF) and Incomplete List of Disallowed Inputs

    ssrfcheck is a library that checks if a string contains a potential SSRF attack. In 1.3.0 and earlier, ssrfcheck fails to block Server-Side Request Forgery attacks when the target private IP address is encoded as an IPv4-mapped IPv6 address (e.g. http://[::ff…