Read the docs

Nossrf Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Nossrf Project records in CISA KEV

No Nossrf Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Nossrf 1 record HIGH

Records

1 record

TI-2025-02356 CVE-2025-2691 · GHSA-vm77-mr48-27wj

Server-side request forgery in nossrf

Priority HIGH 77

Versions of the package nossrf before 1.0.4 are vulnerable to Server-Side Request Forgery (SSRF) where an attacker can provide a hostname that resolves to a local or reserved IP address space and bypass the SSRF protecti…

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00398 Published 2025-03-23 Fixed in 1.0.4 CWE-918
Open these records in search →