Go modules package
github.com/hakobe/paranoidhttp
pkg:golang/github.com/hakobe/paranoidhttp
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2023-24623 | Hig | 7.5 | < 0.3.0 | 0.3.0 | Jan 30, 2023 | Paranoidhttp before 0.3.0 allows SSRF because [::] is equivalent to the 127.0.0.1 address, but does not match the filter for private addresses. |
- affected < 0.3.0fixed 0.3.0
Paranoidhttp before 0.3.0 allows SSRF because [::] is equivalent to the 127.0.0.1 address, but does not match the filter for private addresses.