npm/@novu/application-generic: medium 6.8
@novu/application-generic: `validateUrlSsrf` permits CGNAT (100.64.0.0/10) destinations — affects Workflow HTTP request step + Webhook filter condition
Action: Upgrade @novu/application-generic to 3.17.0 or later.
npm i @novu/application-generic@3.17.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.17.0 | - |
Fixed versions
| 3.17.0 |
Sources
- osv: GHSA-vg6v-j97m-h5xq
- https://github.com/novuhq/novu/security/advisories/GHSA-vg6v-j97m-h5xq
- https://github.com/novuhq/novu
published · modified · JSON