CVE-2024-27927

CVE-2024-27927 affects RSSHub (prior to 1.0.0-master.a429472). The issue is Server-Side Request Forgery (SSRF) that lets unauthenticated remote actors use the RSSHub server as a proxy to generate HTTP GET requests to arbitrary targets, potentially leaking the server IP or internal-network details...