VYPR

once-campfire

by Basecamp

CVEs (1)

  • CVE-2026-100355LowOct 30, 2026
    risk 0.13cvss 3.1epss 0.00

    Campfire is a web-based chat application. In version 1.4.4 and earlier, when a Campfire message contains a link, the server fetches it to build an OpenGraph unfurl preview. `RestrictedHTTP::PrivateNetworkGuard` relied on Ruby's `IPAddr#private? `` IPAddr#loopback?`, and…