Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/07/28 9:45 p.m.14 views

datamodel-code-generator vulnerable to SSRF protection bypass via DNS rebinding

Summary datamodel-code-generator's anti-SSRF guard validates the resolved IP of a fetch target once and then lets httpx perform its own independent DNS resolution to connect, so the validated address is never pinned. A hostname that resolves to a public IP at validation time and a private IP at...

7.5CVSS6AI score0.00193EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder