p PatchFirst

PatchFirst · Latest vulnerabilities

nossrf vulnerabilities

Vulnerabilities published for nossrf in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerability: 1

  1. CVE-2025-2691

    High · CVSS 8.8EPSS 0.4%Fix available

    CVE-2025-2691

    Versions of the package nossrf before 1.0.4 are vulnerable to Server-Side Request Forgery (SSRF) where an attacker can provide a hostname that resolves to a local or reserved IP address space and bypass the SSRF protection mechanism.

    nossrfNode.js
    • Update to 1.0.4
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →