Skip to content
Threat Feed
Subscribe

Product

Ip-Address (<= 10.3.0)

1 brief RSS
high advisory

SSRF via Ambiguous IPv4 Parsing in ip-address Library

The ip-address library versions 10.3.0 and below incorrectly parse IPv4 addresses with leading zeros, leading to trust-boundary bypasses and SSRF when used to filter internal network access.

ip-address ssrf library-vulnerability supply-chain
1t 1c