Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/07/09 1:35 p.m.12 views

pyLoad: SSRF guard bypass via IPv6 6to4/NAT64 transition wrappers of internal IPs

Summary isglobaladdress in src/pyload/core/utils/web/check.py is the central guard against SSRF-style outbound connections in pyload-ng. It tests whether a given IP is "globally routable" via Python's ipaddress.ipaddressvalue.isglobal, and callers treat not isglobal as "deny": python def...

6.8CVSS6AI score0.00039EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder