Dozzle: SSRF guard bypass via IPv6 transition addresses (6to4/NAT64/Teredo) in webhook notification dispatcher

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-73087 · Microsoft / collected KEV context

GHSA-p2w3-6x73-2f6x

GO-2026-6440

cve-program · CVE-2026-73087

• https://github.com/amir20/dozzle/security/advisories/GHSA-p2w3-6x73-2f6x
• https://github.com/amir20/dozzle/pull/4887
• https://github.com/amir20/dozzle/commit/8cf7ccd5ee041ecaea92b49951793d4d2393761f
• https://github.com/amir20/dozzle/releases/tag/v10.6.15

nvd · CVE-2026-73087

• https://github.com/amir20/dozzle/commit/8cf7ccd5ee041ecaea92b49951793d4d2393761f
• https://github.com/amir20/dozzle/pull/4887
• https://github.com/amir20/dozzle/releases/tag/v10.6.15
• https://github.com/amir20/dozzle/security/advisories/GHSA-p2w3-6x73-2f6x

osv · GHSA-p2w3-6x73-2f6x

• https://github.com/amir20/dozzle/security/advisories/GHSA-p2w3-6x73-2f6x
• https://nvd.nist.gov/vuln/detail/CVE-2026-73087
• https://github.com/amir20/dozzle/pull/4887
• https://github.com/amir20/dozzle/commit/8cf7ccd5ee041ecaea92b49951793d4d2393761f
• https://github.com/amir20/dozzle
• https://github.com/amir20/dozzle/releases/tag/v10.6.15

osv · GO-2026-6440

• https://github.com/amir20/dozzle/security/advisories/GHSA-p2w3-6x73-2f6x
• https://nvd.nist.gov/vuln/detail/CVE-2026-73087
• https://github.com/amir20/dozzle/commit/8cf7ccd5ee041ecaea92b49951793d4d2393761f
• https://github.com/amir20/dozzle/pull/4887
• https://github.com/amir20/dozzle/releases/tag/v10.6.15

No related operational record is retained in the current change model.