CVE-2025-2691Élevée · CVSS 8.8EPSS 0,4%Correctif disponibleCVE-2025-2691Versions of the package nossrf before 1.0.4 are vulnerable to Server-Side Request Forgery (SSRF) where an attacker can provide a hostname that resolves to a local or reserved IP address space and bypass the SSRF protection mechanism.nossrfNode.jsMettez à jour vers 1.0.4Publication 23 mars 2025Mise à jour 3 août 2026Avis original 1 ↗Avis original 2 ↗