CVE-2025-2691

Published: 2025-03-23T15:15Z

Last Modified: 2025-03-26T15:06Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Versions of the package nossrf before 1.0.4 are vulnerable to Server-Side Request Forgery (SSRF) where an attacker can provide a hostname that resolves to a local or reserved IP address space and bypass the SSRF protection mechanism. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt