Open Redirect

Overview irrd is an Internet Routing Registry daemon IRRd Affected versions of this package are vulnerable to Open Redirect via manipulation of the Host header during the password reset or account creation. An attacker can gain unauthorized access to user accounts by sending crafted email links...

PYSEC-2026-2186

Internet Routing Registry daemon version 4 is an IRR database server, processing IRR objects in the RPSL format. From version 4.4.0 to before version 4.4.5 and from version 4.5.0 to before version 4.5.1, an attacker can manipulate the HTTP Host header on a password reset or account creation...