Description
DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. Prior to 1.0.3, every IPv6 category bypasses is_url_safe. This vulnerability is fixed in 1.0.3.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HackingRepo | dssrf-js | < 1.0.3 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| npm | dssrf | < 1.0.3 | 1.0.3 | GHSA-8p33-q827-ghj5 |