CVE-2026-62143

Name of the Vulnerable Software and Affected Versions misp-modules (affected versions not specified)

Description A Server-Side Request Forgery (SSRF) protection bypass exists in the html to markdown expansion module. The module fails to normalize IPv4-mapped IPv6 addresses before comparing them against blocked ranges for loopback, private, and link-local IP addresses. An authenticated attacker can provide an IPv4-mapped IPv6 address or a hostname that resolves to one to bypass these filters. This allows the server to connect to internal web services, administrative interfaces, or cloud instance metadata, with the retrieved content returned to the attacker as converted Markdown.

Recommendations Upgrade to the patched release that normalizes IPv4-mapped IPv6 addresses to their underlying IPv4 representation and rejects URLs without a valid hostname.