CVE-2026-110240Published
Lancet through 2.3.9 SSRF Protection Bypass via netutil.IsInternalIP
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-110240 · Microsoft / collected KEV context
cve-program · CVE-2026-110240
- https://github.com/duke-git/lancet/issues/356
- https://github.com/duke-git/lancet/pull/357
- https://github.com/duke-git/lancet/commit/835111c832939a85416d686a1e99d5fe7060c9b4
- https://github.com/duke-git/lancet/blob/v2.3.9/netutil/net.go#L192-L205
- https://github.com/duke-git/lancet/blob/v1.4.6/netutil/net.go#L158-L170
- https://github.com/duke-git/lancet
- https://www.vulncheck.com/advisories/lancet-through-2.3.9-ssrf-protection-bypass-via-netutil-isinternalip
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.