CVE-2023-24623

Paranoidhttp before 0.3.0 allows SSRF because :: is equivalent to the 127.0.0.1 address, but does not match the filter for private addresses...

CVE-2023-24623

CVE-2023-24623 affects paranoidhttp before 0.3.0. The SSRF flaw arises because [::] is equivalent to 127.0.0.1 but the private-address filter is not applied, allowing unintended requests to internal resources. Public references in connected docs confirm the vulnerability and its description acros...

CVE-2023-24623

Paranoidhttp before 0.3.0 allows SSRF because :: is equivalent to the 127.0.0.1 address, but does not match the filter for private addresses...