Skip to content
Threat Feed

Product

Dssrf (< 1.3.0)

1 brief RSS
high advisory

dssrf SSRF Protection Bypass via IPv6 Addresses

A vulnerability in the dssrf npm package allows attackers to bypass SSRF protections by using specially crafted IPv6 addresses, despite documentation claiming IPv6 is disabled, which can lead to internal resource access or other malicious activities.

dssrf ssrf vulnerability ipv6 defense-evasion
2r 12i