Headline
CVE-2023-24623: Comparing v0.2.0...v0.3.0 · hakobe/paranoidhttp
Paranoidhttp before 0.3.0 allows SSRF because [::] is equivalent to the 127.0.0.1 address, but does not match the filter for private addresses.
Permalink
Comparing changes
Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also .
Open a pull request
Create a new pull request by comparing changes across two branches. If you need to, you can also .
base repository: hakobe/paranoidhttp base: v0.2.0
head repository: hakobe/paranoidhttp compare: v0.3.0
- 11 commits
- 5 files changed
- 5 contributors
Commits on Apr 22, 2019
Commits on Apr 29, 2019
Commits on Jun 27, 2021
Commits on Jun 28, 2021
Commits on Jan 8, 2022
Commits on Jan 14, 2022
Commits on Jan 19, 2023