Lucene search
+L

457 matches found

Github Security Blog
Github Security Blog
added 2 days ago6 views

datamodel-code-generator vulnerable to SSRF protection bypass via DNS rebinding

Summary datamodel-code-generator's anti-SSRF guard validates the resolved IP of a fetch target once and then lets httpx perform its own independent DNS resolution to connect, so the validated address is never pinned. A hostname that resolves to a public IP at validation time and a private IP at...

7.5CVSS6AI score0.00192EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder