CVE-2026-44232 dssrf: every IPv6 category bypasses is_url_safe

DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. Prior to 1.0.3, every IPv6 category bypasses isurlsafe. This vulnerability is fixed in 1.0.3...

@mappies/miniwat-mcp-web (>=0.1.0, <=0.5.0) potentially affected by CVE-2026-44232 via dssrf (1.0.6)

dssrf NPM version 1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on dssrf and may be impacted: - @mappies/miniwat-mcp-web =0.1.0, =0.5.0 Source cves: CVE-2026-44232 Source advisory: SNYK:JS-DSSRF-16636451...