https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T11:16:11.463647+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-07586 bdu:2026-07586 2026-10-10T11:16:11.531523+00:00 bdu:2026-07586 https://cve.radiocsirt.org/vuln/euvd-2026-343700 EUVD-2026-343700 2026-10-10T11:16:11.531576+00:00 EUVD-2026-343700 https://cve.radiocsirt.org/vuln/fkie_cve-2025-2691 fkie_cve-2025-2691 2026-10-10T11:16:11.531600+00:00

Versions of the package nossrf before 1.0.4 are vulnerable to Server-Side Request Forgery (SSRF) where an attacker can provide a hostname that resolves to a local or reserved IP address space and bypass the SSRF protection mechanism.

 https://cve.radiocsirt.org/vuln/ghsa-vm77-mr48-27wj GHSA-vm77-mr48-27wj — nossrf Server-Side Request Forgery (SSRF) 2026-10-10T11:16:11.531643+00:00

Affected: npm: nossrf

Versions of the package nossrf before 1.0.4 are vulnerable to Server-Side Request Forgery (SSRF), where an attacker can provide a hostname that resolves to a local or reserved IP address space and bypass the SSRF protection mechanism.