Homepage

dssrf@1.0.0

SSRF defense library for Node.js with safe URL validation utilities.

  • latest version

    1.0.6

  • latest non vulnerable version

    1.0.6

  • first published

    7 months ago

  • latest version published

    27 days ago

  • licenses detected

  • View dssrf package health on Snyk  (opens in a new tab)
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the dssrf package. This does not include vulnerabilities belonging to this package’s dependencies.

    Fix vulnerabilities automatically

    Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

    Fix for free
    VulnerabilityVulnerable Version
    • H
    Incomplete Filtering of Special Elements

    dssrf is a SSRF defense library for Node.js with safe URL validation utilities.

    Affected versions of this package are vulnerable to Incomplete Filtering of Special Elements via the is_url_safe function. An attacker can access internal network resources by supplying specially crafted IPv6 addresses that bypass security checks.

    How to fix Incomplete Filtering of Special Elements?

    Upgrade dssrf to version 1.0.3 or higher.

    <1.0.3
    Go back to all versions of this package