← Database

CVE-2025-2691

HIGH CVSS: 8.2 Published: 2025-03-23 Modified: 2026-06-17

Description

Versions of the package nossrf before 1.0.4 are vulnerable to Server-Side Request Forgery (SSRF) where an attacker can provide a hostname that resolves to a local or reserved IP address space and bypass the SSRF protection mechanism.

Affected Platforms

Nossrf Project Nossrf

Weakness Type

CWE-918, CWE-918

References