CVE-2026-43929 - Vulnerability Analysis

Overview

ssrfcheck <= 1.3.0 contains a server-side request forgery caused by improper handling of IPv4-mapped IPv6 addresses in URL parsing, letting attackers bypass private IP blocking and perform SSRF, exploit requires user-supplied URLs.

Severity & Score

Impact

Attackers can bypass SSRF protections to access internal network resources, potentially exposing sensitive data or services.

Mitigation

Update to a version later than 1.3.0 that properly handles IPv4-mapped IPv6 addresses.

References

• https://github.com/felippe-regazio/ssrfcheck/security/advisories/GHSA-j4rj-2jr5-m439

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner