Skip to content
OpenAdvisories

Vendor

vlang

2 known vulnerabilities.

Products

v 2

1 result · Clear filters · Feed

  • High 8.6

    V 0.5.2 SSRF Bypass via Parser Differential in net.urllib and net.http

    V through 0.5.2, fixed in commit 85859f0, contains a server-side request forgery (SSRF) bypass vulnerability that allows attackers to circumvent host-based allowlists by exploiting a parser differential between net.urllib and net.http. Attackers can craft a U…