Approved changes feed: RSS · Atom

cpe:2.3:a:includesecurity:safeurl-python:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorIncludesecurity (fcfa2ef7-52e7-5331-9599-f8e47e222a01)
ProductSafeurl Python (8d6c2695-96b4-5be4-afc0-8c910e1887e2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/includesecurity/safeurl-python purl2cpe 2026-06-01 10:14:21.920733
pkg:pypi/safeurl-python purl2cpe 2026-06-01 10:14:21.920736

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-24622 vulnerable 2026-06-08 05:56:06.170426 Details available
isInList in the safeurl-python package before 1.2 for Python has an insufficiently restrictive regular expression for external domains, leading to SSRF.
Published: 2023-01-30T00:00:00.000Z
Updated: 2025-03-28T14:27:49.215Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.