CVE-2021-23718

CVE-2021-23718 concerns the npm package ssrf-agent (versions before 1.0.5). The vulnerability arises in the defaultIpChecker function, which fails to properly validate if a requested IP is private, enabling potential Server-Side Request Forgery (SSRF) via crafted URLs. Multiple connected sources ...