CVE-2025-2691Alta · CVSS 8.8EPSS 0,4%Corrección disponibleCVE-2025-2691Versions of the package nossrf before 1.0.4 are vulnerable to Server-Side Request Forgery (SSRF) where an attacker can provide a hostname that resolves to a local or reserved IP address space and bypass the SSRF protection mechanism.nossrfNode.jsActualiza a 1.0.4Publicación 23 de marzo de 2025Actualización 3 de agosto de 2026Aviso original 1 ↗Aviso original 2 ↗