Junglewise Threat Intelligence

Withdrawn: safeurl-python contains Server-Side Request Forgery

Severity: low · CVSS 3.1 · Published 2023-01-30

Technologies: safeurl-python (PyPI). Vendors: PyPI.

Executive brief

Withdrawn: safeurl-python contains Server-Side Request Forgery

Affected products

PyPI safeurl-python

Related threats

SafeURL-Python hostname blocklist FQDN bypass
PYSEC-2023-298 - isInList in the safeurl-python package before 1.2 for Python has an insufficiently restrictive regular expression for external domains, lead