CVE-2021-23718: Ssrf-Agent Project Ssrf-Agent

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

The package ssrf-agent before 1.0.5 are vulnerable to Server-side Request Forgery (SSRF) via the defaultIpChecker function. It fails to properly validate if the IP requested is private.

Affected products

• Ssrf-Agent Project Ssrf-Agent: before 1.0.5 (fixed in 1.0.5)

Published 2021-11-22. Last modified 2026-06-17.