safeurl
Hex2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting safeurlpage 1 of 1
- CVE-2026-77866CRITICALCVSS 9.0EG 9.02026-09-15
vulnerable: 0.1.0, 0.2.0, 0.3.0, 0.3.1, 1.0.0
Server-Side Request Forgery (SSRF) vulnerability in Slab safeurl allows an attacker who controls a validated URL to reach internal network destinations the library is configured to block. Only IPv4 addresses are matched against the reserv…
- CVE-2026-77972CRITICALCVSS 9.0EG 9.02026-09-15
vulnerable: 0.1.0, 0.2.0, 0.3.0, 0.3.1, 1.0.0
Time-of-check Time-of-use (TOCTOU) Race Condition in Slab safeurl allows an attacker who controls a hostname's DNS responses to reach internal network destinations that validation rejected. Validation returns a verdict and not the address…
Check whether safeurl is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for safeurl CVEs against the assets you own.
Book a Demo →