Product

hakobe github.com/hakobe/paranoidhttp vulnerabilities

1 published CVE affecting hakobe github.com/hakobe/paranoidhttp, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 1
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Latest hakobe github.com/hakobe/paranoidhttp CVEs

Newest publication first

CVE-2023-24623 Paranoidhttp Server-Side Request Forgery vulnerability
Published 2023-01-30

HighCVSS 7.5 EPSS 0.72%

Paranoidhttp before 0.3.0 allows SSRF because [::] is equivalent to the 127.0.0.1 address, but does not match the filter for private addresses.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

hakobe github.com/hakobe/paranoidhttp vulnerabilities

Latest hakobe github.com/hakobe/paranoidhttp CVEs

CVE-2023-24623 Paranoidhttp Server-Side Request Forgery vulnerability