TI-2026-47523 CVE-2026-67201 · GHSA-mvrj-5wv7-cfg9
V 0.5.2 SSRF Bypass via Parser Differential in net.urllib and net.http
Priority HIGH 73
V through 0.5.2, fixed in commit 85859f0, contains a server-side request forgery (SSRF) bypass vulnerability that allows attackers to circumvent host-based allowlists by exploiting a parser differential between net.urlli…