VYPR

npm package

vnu-jar

pkg:npm/vnu-jar

Vulnerabilities (1)

  • CVE-2025-15104Jan 16, 2026
    affected <= 26.1.11

    Nu Html Checker (validator.nu) contains a restriction bypass that allows remote attackers to make the server perform arbitrary HTTP/HTTPS requests to internal resources, including localhost services. While the validator implements hostname-based protections to block direct access