GHSA-8p33-q827-ghj5
NoneCVSS
—
EPSS
—
Published
May 6, 2026
CISA due date
—
The record
dssrf: every IPv6 category bypasses is_url_safe
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | dssrf | 0 | 1.3.0 |
Related vulnerabilities
- CVE-2026-44232 DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF… Same vulnerability
- CVE-2026-86206 A vulnerability in the N-central internal API access control filter allows unauthorised… CWE-791
- CVE-2026-75979 A vulnerability was found in xianrendzw EasyReport up to 2.0.17.0522_Beta. CWE-791
- CVE-2026-19929 A vulnerability was identified in OpenBoxes up to 0.9.6. CWE-791
- CVE-2026-11998 A flaw in AngularJS' Strict Contextual Escaping (SCE) logic allows bypassing certain SCE… CWE-791
- CVE-2026-48208 An improper neutralization of active SVG content in OTRS or ((OTRS)) Community Edition… CWE-791
- CVE-2026-9498 A vulnerability has been found in Dromara lamp-cloud up to 5.6.2. CWE-791
- CVE-2026-8740 A flaw has been found in Sanluan PublicCMS 5.202506.d. CWE-791