Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/04/04 6:38 a.m.23 views

web3.py: SSRF via CCIP Read (EIP-3668) OffchainLookup URL handling

Summary web3.py implements CCIP Read / OffchainLookup EIP-3668 by performing HTTP requests to URLs supplied by smart contracts in offchainlookuppayload"urls". The implementation uses these contract-supplied URLs directly after sender / data template substitution without any destination validation...

7.2CVSS6AI score0.00229EPSS
SaveExploits2References4Affected Software1
Rows per page
Query Builder