EUVD-2025-30453

Malicious code in bioql PyPI...

@akbarsafari00/admin (5.52.1-fa.1), @akbarsafari00/bonyan (>=5.52.1-fa.2, <=5.52.1-fa.6) +160 more potentially affected by CVE-2025-9960 via is-localhost-ip (>=1.4.0, <=3.0.1)

is-localhost-ip NPM version =1.4.0, =5.52.1-fa.2, =5.52.1-fa.2, =5.52.1-fa.5, =5.52.1-fa.2, =4.25.19-patch.1, =2.3.7, =1.0.0, =1.2.11, =0.5.1, =1.0.6, =3.1.5 and more Source cves: CVE-2025-9960 Source advisory: SNYK:JS-ISLOCALHOSTIP-13004668...

CVE-2025-9960

A restriction bypass vulnerability in is-localhost-ip could allow attackers to perform Server-Side Request Forgery SSRF. This issue affects is-localhost-ip: 2.0.0...

CVE-2025-9960

CVE-2025-9960 affects is-localhost-ip 2.0.0 and is a restriction bypass that enables SSRF. Public sources describe that is-localhost-ip can misclassify addresses, allowing localhost checks to be bypassed (e.g., IPv6-mapped IPv4 forms such as ::ffff:127.0.0.1) to access internal resources. Several...

CVE-2025-9960 is-localhost-ip 2.0.0 - SSRF via Restrictions bypass

A restriction bypass vulnerability in is-localhost-ip could allow attackers to perform Server-Side Request Forgery SSRF. This issue affects is-localhost-ip: 2.0.0...

PT-2025-39063

Name of the Vulnerable Software and Affected Versions is-localhost-ip version 2.0.0 Description A restriction bypass issue in is-localhost-ip may allow attackers to perform Server-Side Request Forgery SSRF. SSRF occurs when a server is tricked into making requests to unintended locations,...

CVE-2025-9960: Server-Side Request Forgery (SSRF)

A restriction bypass vulnerability in is-localhost-ip could allow attackers to perform Server-Side Request Forgery SSRF. This issue affects is-localhost-ip: 2.0.0...

is-localhost-ip 代码问题漏洞

is-localhost-ip is a tool by the individual developer Konstantin Vyatkin to check if a given host/DNS name or IPv4/IPv6 address belongs to the local computer. A code issue vulnerability exists in is-localhost-ip version 2.0.0, which stems from a restriction bypass that could lead to a server-side...