CVE-2025-2691

Name of the Vulnerable Software and Affected Versions nossrf versions prior to 1.0.4

Description The issue is related to Server-Side Request Forgery (SSRF) where an attacker can provide a hostname that resolves to a local or reserved IP address space and bypass the SSRF protection mechanism.

Recommendations For versions prior to 1.0.4, update to version 1.0.4 to patch the SSRF flaw. As a temporary workaround, consider restricting the ability to provide hostnames that resolve to local or reserved IP address spaces until a patch is available.