Lucene search
+L

5 matches found

OSV
OSV
added 2021/03/29 4:32 p.m.62 views

GHSA-MPVW-25MG-59VX Server-side Request Forgery (SSRF) via img tags in reportlab

All versions of package reportlab at time of writing are vulnerable to Server-side Request Forgery SSRF via img tags. In order to reduce risk, use trustedSchemes & trustedHosts see in Reportlab's documentation Steps to reproduce by Karan Bamal: 1. Download and install the latest package of...

7.1CVSS6.5AI score0.01487EPSS
SaveExploits1References12
Rows per page
Query Builder