CVE-2026-55787
2 advisories.
PyPI/flyto-core CVE-2026-55787: high 7.1, EPSS 0.24%
flyto-core has SSRF guard bypass via IPv6 transition addresses (IPv4-mapped / 6to4 / NAT64) in validate_url_ssrf
Action: Upgrade flyto-core to 2.26.3 or later.
pip install flyto-core==2.26.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.26.3 | - |
Fixed versions
| 2.26.3 |
Sources
- osv: GHSA-794r-5rp2-fpg8
- https://github.com/flytohub/flyto-core/security/advisories/GHSA-794r-5rp2-fpg8
- https://github.com/flytohub/flyto-core
CVE-2026-55787 · published · modified · JSON
PyPI/flyto-core CVE-2026-55787: high 7.1, EPSS 0.24%
flyto-core has SSRF guard bypass via IPv6 transition addresses (IPv4-mapped / 6to4 / NAT64) in validate_url_ssrf
Action: Upgrade flyto-core to 2.26.3 or later.
pip install flyto-core==2.26.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.26.3 | - |
Fixed versions
| 2.26.3 |
Sources
- osv: PYSEC-2026-2481
- https://github.com/flytohub/flyto-core/security/advisories/GHSA-794r-5rp2-fpg8
- https://github.com/flytohub/flyto-core
- https://pypi.org/project/flyto-core
- https://github.com/advisories/GHSA-794r-5rp2-fpg8
- https://nvd.nist.gov/vuln/detail/CVE-2026-55787
CVE-2026-55787 · published · modified · JSON