Lucene search
+L

8140 matches found

Github Security Blog
Github Security Blog
•added 2026/09/28 8:43 p.m.•3 views

ip-address: Address6.isLinkLocal() recognizes fe80::/64 rather than fe80::/10, allowing SSRF and trust-boundary bypass to on-link hosts

Summary Address6.isLinkLocal recognizes fe80::/64 rather than fe80::/10. Link-local unicast is the whole /10 under RFC 4291 §2.4 and the IANA IPv6 Special-Purpose Address Registry, so the method returns false for every link-local address outside the one /64 that stateless address autoconfiguratio...

6.3CVSS5.8AI score
SaveExploits0References5Affected Software1
Rows per page
Query Builder