CVE-2023-24622: Includesecurity Safeurl-Python

Medium severity, CVSS 5.3. EPSS: 0.6% chance of exploitation in the next 30 days.

isInList in the safeurl-python package before 1.2 for Python has an insufficiently restrictive regular expression for external domains, leading to SSRF.

Affected products

• Includesecurity Safeurl-Python: version 1.0 only

Published 2023-01-30. Last modified 2026-06-17.