10 matches found
PYSEC-2026-3414 web3.py: SSRF via CCIP Read (EIP-3668) OffchainLookup URL handling
Summary web3.py implements CCIP Read / OffchainLookup EIP-3668 by performing HTTP requests to URLs supplied by smart contracts in offchainlookuppayload"urls". The implementation uses these contract-supplied URLs directly after sender / data template substitution without any destination validation...
7.2CVSS6.2AI score0.00229EPSS
SaveExploits2References6
20