CVE-2026-44232

DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. Prior to 1.0.3, every IPv6 category bypasses is_url_safe. This vulnerability is fixed in 1.0.3.

Score

CVSS 4.0 8.7 High

Status

Deferred - security-advisories@github.com

Published

2026-05-12

Last modified

2026-10-26

Weaknesses

CWE-791

Affected products

• Dssrf-js (Hackingrepo)

References

• https://github.com/HackingRepo/dssrf-js/security/advisories/GHSA-8p33-q827-ghj5