{"id":"EUVD-2026-29839","enisaUuid":"a070b043-bf13-3647-ada6-7ab293b1a721","description":"DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. Prior to 1.0.3, every IPv6 category bypasses is_url_safe. This vulnerability is fixed in 1.0.3.","datePublished":"May 12, 2026, 8:28:56 PM","dateUpdated":"Jun 18, 2026, 10:54:50 PM","baseScore":8.7,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/HackingRepo/dssrf-js/security/advisories/GHSA-8p33-q827-ghj5\n","aliases":"CVE-2026-44232\nGHSA-8p33-q827-ghj5\n","assigner":"GitHub_M","epss":0.41,"enisaIdProduct":[{"id":"5811446f-436b-33cb-ad05-b5fad148f5df","product":{"name":"dssrf-js","vendor":{"name":"HackingRepo"}},"product_version":"\u003c 1.0.3"}],"enisaIdVendor":[{"id":"a74547b5-ed84-3bb9-addc-4ad46b6c8105","vendor":{"name":"HackingRepo"}}],"enisaIdVulnerability":[{"id":"ad1d41b2-170d-3269-8b1c-6db121a4f369","vulnerability":{"id":"CVE-2026-44232","description":"DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. Prior to 1.0.3, every IPv6 category bypasses is_url_safe. This vulnerability is fixed in 1.0.3.","datePublished":"May 12, 2026, 8:28:56 PM","dateUpdated":"Jun 18, 2026, 10:54:50 PM","status":"PUBLISHED","baseScore":8.7,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N","references":"https://github.com/HackingRepo/dssrf-js/security/advisories/GHSA-8p33-q827-ghj5\n","enisa_id":"EUVD-2026-29839\n","assigner":"GitHub_M","epss":0.41,"dataProcessed":"Nov 1, 2026, 7:18:36 AM","vulnerabilityProduct":[{"id":"8ac3c473-f5c1-3943-b49a-6cc4348ad2ed","product":{"name":"dssrf-js","vendor":{"name":"HackingRepo"}},"product_version":"\u003c 1.0.3"}],"vulnerabilityVendor":[{"id":"e971b408-0388-3191-aa84-391ad8ea8b80","vendor":{"name":"HackingRepo"}}]}},{"id":"d1759c68-df96-3478-a436-82c0b2928175","vulnerability":{"id":"GHSA-8p33-q827-ghj5","description":"dssrf: every IPv6 category bypasses is_url_safe","datePublished":"May 6, 2026, 6:13:32 PM","dateUpdated":"Jun 18, 2026, 10:54:14 PM","baseScore":0.0,"references":"https://github.com/HackingRepo/dssrf-js/security/advisories/GHSA-8p33-q827-ghj5\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-44232\nhttps://github.com/HackingRepo/dssrf-js\n","enisa_id":"EUVD-2026-29839\n","aliases":"GHSA-8p33-q827-ghj5\nCVE-2026-44232\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 2:00:21 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}