nossrf 安全漏洞

nossrf is a Snyk open source package. A security vulnerability exists in versions prior to nossrf 1.0.4 that stems from an attacker being able to bypass SSRF protection mechanisms by providing hostnames that resolve to local or reserved IP address spaces...