CVE-2026-54722
DSSRF is a Node.js library that provides a wide range of utilities and advanced SSRF defense checks. Prior to 1.0.4, is_url_safe in src/helpers.ts strips the @ userinfo delimiter with remove_at_symbol_in_string before new URL parses the URL, allowing an attacker-controlled URL to bypass internal-IP validation and cause a client using the original URL to reach an internal service. This issue is fixed in version 1.0.4.
Scoring
- Severity
- HIGH
- CVSS base score
- 8.7
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
- EPSS probability
- 0.33%
- CWE
- CWE-76
- Published
- 2026-07-30
- Last modified
- 2026-07-30
Affected products
- HackingRepo dssrf-js
Weakness type
Related vulnerabilities
- CVE-2026-77180 — NGINX Ingress Controller vulnerability
- CVE-2026-66362 — NGF vulnerability
- CVE-2026-55723 — NGINX Ingress Controller vulnerability
- CVE-2026-11311 — NGINX Gateway Fabric vulnerability
- CVE-2024-4897 — Remote Code Execution in parisneo/lollms-webui
- CVE-2024-34359 — llama-cpp-python vulnerable to Remote Code Execution by Server-Side Template Injection in Model Metadata
- CVE-2024-2952 — Server-Side Template Injection in BerriAI/litellm
- CVE-2024-1883 — Reflected XSS in PaperCut NG/MF