npm/hemmelig CVE-2025-69206: medium 4.3, EPSS 0.20%
hemmelig allows SSRF Filter bypass via Secret Request functionality
Action: Upgrade hemmelig to 7.3.3 or later.
npm i hemmelig@7.3.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.3.3 | - |
Fixed versions
| 7.3.3 |
Sources
- osv: GHSA-vvxf-wj5w-6gj5
- https://github.com/HemmeligOrg/Hemmelig.app/security/advisories/GHSA-vvxf-wj5w-6gj5
- https://nvd.nist.gov/vuln/detail/CVE-2025-69206
- https://github.com/HemmeligOrg/Hemmelig.app/commit/6c909e571d0797ee3bbd2c72e4eb767b57378228
- https://github.com/HemmeligOrg/Hemmelig.app
CVE-2025-69206 · published · modified · JSON