Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
•added 2026/07/02 7:07 p.m.•43 views

@asymmetric-effort/specifyjs: Localhost bypass incomplete (IPv6, 0.0.0.0, 127.x range)

Finding Location: core/src/shared/secure-fetch.ts:52-54 The localhost exception allowed localhost and 127.0.0.1 but did not cover 0.0.0.0, ::1 IPv6 localhost, or the full 127.0.0.0/8 loopback range. Status Fixed in v0.2.136 — Localhost detection now covers localhost, 127.0.0.1, ::1, 0.0.0.0, and...

5.8AI score
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2026/07/02 12:00 a.m.•6 views

PT-2026-57604

Finding Location: core/src/shared/secure-fetch.ts:52-54 The localhost exception allowed localhost and 127.0.0.1 but did not cover 0.0.0.0, ::1 IPv6 localhost, or the full 127.0.0.0/8 loopback range. Status Fixed in v0.2.136 — Localhost detection now covers localhost, 127.0.0.1, ::1, 0.0.0.0, and...

6.9CVSS5.9AI score
SaveExploits0References5
Rows per page
Query Builder