GHSA-j4rj-2jr5-m439
High · 8.2CVSS
8.2
EPSS
—
Published
May 5, 2026
CISA due date
—
The record
ssrfcheck Vulnerable to Server-Side Request Forgery (SSRF) and Incomplete List of Disallowed Inputs
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| npm | ssrfcheck | 0 | No fix |
Related vulnerabilities
- CVE-2026-43929 ssrfcheck is a library that checks if a string contains a potential SSRF attack. Same vulnerability
- GHSA-p4hc-9pjh-55c8 ssrfcheck: SSRF Bypass Caused by Failure to Classify Reserved IP Address Space as Invalid Also affects ssrfcheck
- CVE-2026-114729 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content… CWE-184
- CVE-2026-114728 Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a remote content… CWE-184
- CVE-2026-106445 Handlebars provides the power necessary to let users build semantic templates. CWE-184
- CVE-2026-102828 simple-git, an interface for running git commands in any node.js application, enables… CWE-184
- CVE-2026-102829 simple-git, an interface for running git commands in any node.js application, enables… CWE-184
- CVE-2026-87985 An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass… CWE-184