npm/dssrf CVE-2026-44232: high 8.7, EPSS 0.41%
dssrf: every IPv6 category bypasses is_url_safe
Action: Upgrade dssrf to 1.0.3 or later.
npm i dssrf@1.0.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.0.3 | - |
Fixed versions
| 1.0.3 |
Sources
- osv: GHSA-8p33-q827-ghj5
- nvd: CVE-2026-44232
- https://github.com/HackingRepo/dssrf-js/security/advisories/GHSA-8p33-q827-ghj5
- https://github.com/HackingRepo/dssrf-js
CVE-2026-44232 · published · modified · JSON