Vulnerability	Vulnerable Version
M Origin Validation Error @misskey-dev/summaly is a Get web page's summary Affected versions of this package are vulnerable to Origin Validation Error in `got.scpaping`. An attacker can probe a victim's internal network for HTTP services that aren't supposed to be exposed to the outside world by using an HTTP redirect to bypass IP filtering. This is only exploitable if the attacker can manipulate the HTTP `HEAD` and `GET` requests to redirect to a private IP address. How to fix Origin Validation Error? Upgrade `@misskey-dev/summaly` to version 5.2.1 or higher.	>=5.1.0 <5.2.1
M Incorrect Resource Transfer Between Spheres @misskey-dev/summaly is a Get web page's summary Affected versions of this package are vulnerable to Incorrect Resource Transfer Between Spheres due to a logic error in the `summaly` function. An attacker can bypass redirect restrictions by manipulating the `allowRedirects` option which is not properly enforced. How to fix Incorrect Resource Transfer Between Spheres? Upgrade `@misskey-dev/summaly` to version 5.2.1 or higher.	<5.2.1

Origin Validation Error

@misskey-dev/summaly is a Get web page's summary

Affected versions of this package are vulnerable to Origin Validation Error in got.scpaping. An attacker can probe a victim's internal network for HTTP services that aren't supposed to be exposed to the outside world by using an HTTP redirect to bypass IP filtering. This is only exploitable if the attacker can manipulate the HTTP HEAD and GET requests to redirect to a private IP address.

How to fix Origin Validation Error?

Upgrade @misskey-dev/summaly to version 5.2.1 or higher.

>=5.1.0 <5.2.1

Incorrect Resource Transfer Between Spheres

@misskey-dev/summaly is a Get web page's summary

Affected versions of this package are vulnerable to Incorrect Resource Transfer Between Spheres due to a logic error in the summaly function. An attacker can bypass redirect restrictions by manipulating the allowRedirects option which is not properly enforced.

How to fix Incorrect Resource Transfer Between Spheres?

Upgrade @misskey-dev/summaly to version 5.2.1 or higher.

<5.2.1

Go back to all versions of this package