PT-2026-106210

Name of the Vulnerable Software and Affected Versions Penpot versions prior to 2.18.0 Description An issue exists in the app.util.ssrf/blocked-address? endpoint where Java InetAddress predicates fail to classify NAT64, 6to4, or Teredo addresses and only apply CIDR checks to IPv4 values. This allo...