🔺Severity: High
👽 Reporter: tipsen
⭐️ Reputation: 909
🛠 State: resolved
💼 Team: arkadiyt-projects
💵 Bounty: null
🕐 Submitted: 2026-03-28
⏰ Disclosed: 2026-03-31 02:31:50
📝 Summary: A vulnerability was discovered in the
ssrf filter library version 1.3.0. The library failed to block the NAT64 local-use IPv6 prefix 64:ff9b:1::/48, allowing such addresses to be treated as public. This enabled SSRF requests through /fetch to targets encoded under that prefix when routable in the deployment environment.📂 Report JSON File: 3634400
@hackeronereports