{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.4.47","last_affected":"1.1.11"}],"component":"zrok","cve_ids":["CVE-2026-45568"],"ecosystem":"PyPI","epss":0.00544,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-jh67-hwqw-m5r7","id":"tcs_01M5KHC80MAV3N1A6A7Q717HHP","modified_at":"2026-07-01T20:23:12.283893Z","published_at":"2026-06-29T11:50:50.353793Z","references":["https://osv.dev/vulnerability/PYSEC-2026-577","https://github.com/openziti/zrok/security/advisories/GHSA-jh67-hwqw-m5r7","https://github.com/openziti/zrok","https://pypi.org/project/zrok","https://github.com/advisories/GHSA-jh67-hwqw-m5r7","https://nvd.nist.gov/vuln/detail/CVE-2026-45568"],"severity":{"label":"critical","score":9.1},"sources":[{"source":"osv","source_id":"PYSEC-2026-577","url":"https://osv.dev/vulnerability/PYSEC-2026-577"},{"source":"nvd","source_id":"CVE-2026-45568","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-45568"}],"summary":"rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths"}