{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.4.47","last_affected":"1.1.11"}],"component":"zrok","cve_ids":["CVE-2026-45568"],"ecosystem":"PyPI","epss":0.00544,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-jh67-hwqw-m5r7","id":"tcs_01M5KFNY4Y9D901BYRGH6BW2K5","modified_at":"2026-06-29T12:26:20.810518832Z","published_at":"2026-05-19T15:16:08Z","references":["https://osv.dev/vulnerability/GHSA-jh67-hwqw-m5r7","https://github.com/openziti/zrok/security/advisories/GHSA-jh67-hwqw-m5r7","https://github.com/openziti/zrok"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"GHSA-jh67-hwqw-m5r7","url":"https://osv.dev/vulnerability/GHSA-jh67-hwqw-m5r7"},{"source":"nvd","source_id":"CVE-2026-45568","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45568"}],"summary":"rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths"}