Product

Dssrf (<= 1.0.4)

1 brief RSS

SSRF Vulnerability in dssrf npm Package via DNS Resolver Logic

The dssrf npm package (versions 1.0.4 and earlier) fails to correctly validate URLs when using 1.1.1.1 as a DNS resolver, incorrectly treating localhost as safe and enabling server-side request forgery (SSRF) when NXDOMAIN responses occur.

dssrf

1c 19m ago