CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2025-2691

Versions of the package nossrf before 1.0.4 are vulnerable to Server-Side Request Forgery (SSRF) where an attacker can provide a hostname that resolves to a local or reserved IP address space and bypass the SSRF protection mechanism.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 18.1%

CVSS Severity

CVSS v3 Score 8.2

References

https://security.snyk.io/vuln/SNYK-JS-NOSSRF-9510842
https://security.snyk.io/vuln/SNYK-JS-NOSSRF-9510842

Products affected by CVE-2025-2691

Nossrf Project » Nossrf » Version: N/A

cpe:2.3:a:nossrf_project:nossrf:-
Nossrf Project » Nossrf » Version: 1.0.0

cpe:2.3:a:nossrf_project:nossrf:1.0.0
Nossrf Project » Nossrf » Version: 1.0.1

cpe:2.3:a:nossrf_project:nossrf:1.0.1
Nossrf Project » Nossrf » Version: 1.0.2

cpe:2.3:a:nossrf_project:nossrf:1.0.2
Nossrf Project » Nossrf » Version: 1.0.3

cpe:2.3:a:nossrf_project:nossrf:1.0.3

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2025-2691

Products

Pricing

Contact Us