4 matches found
nossrf Server-Side Request Forgery (SSRF)
Versions of the package nossrf before 1.0.4 are vulnerable to Server-Side Request Forgery SSRF, where an attacker can provide a hostname that resolves to a local or reserved IP address space and bypass the SSRF protection mechanism...
9.1CVSS6.5AI score0.00365EPSS
SaveExploits1References3Affected Software1
CVE-2025-0376 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ee-fips, gitlab-pages, gitlab-ee-fips, gitlab-pages-fips, gitlab-runner-fips, gitlab-cng, gitlab-rails-ee, gitlab-cng-fips, gitlab-ee...
8.7CVSS5.8AI score0.00379EPSS
SaveExploits0
20