VYPR

request-baskets

by darklynx

CVEs (1)

  • CVE-2023-27163Mar 31, 2023
    risk 0.07cvss epss 0.93

    request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baskets/{name}. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request.