VYPR

npm package

hemmelig

pkg:npm/hemmelig

Vulnerabilities (1)

  • CVE-2025-69206Dec 29, 2025
    affected < 7.3.3fixed 7.3.3

    Hemmelig is a messing app with with client-side encryption and self-destructing messages. Prior to version 7.3.3, a Server-Side Request Forgery (SSRF) filter bypass vulnerability exists in the webhook URL validation of the Secret Requests feature. The application attempts to bloc