Advisories · Weakness
CWE-1389.
Every Advisory and CVE whose sources give the weakness CWE-1389, newest first.
- CVSS 7.6 High
Flowise: SSRF Protection Bypass via IPv4-Mapped IPv6 Addresses
- Server-side request forgery (SSRF)
- CWE-1389
<3.1.3 · fixed in 3.1.3
GHSA-c6xh-wv4j-ppv5 · CVE-2026-69257 - CVSS 5.8 Medium
Vaultwarden: Server-side request forgery (SSRF) via Icon Endpoint Decimal/Hex/Octal IP Bypass
- dani-garcia vaultwarden
- Server-side request forgery (SSRF)
- CWE-1389
- CVSS 8.6 High
Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges
- Server-side request forgery (SSRF)
- CWE-1286
>=0.11.2, <1.9.12 || >=1.10.0, <1.10.11 || >=2.0.0, <2.0.19 || >=2.1.0, <2.1.15 || >=2.2.0, <2.2.4 · fixed in 1.9.12, 1.10.11, 2.0.19, 2.1.15, 2.2.4
GHSA-xw9q-2mv6-9fr8 · CVE-2026-50131 - CVSS 6.9 Medium
One Search 1.1.0.0 Denial of Service
- OneSearch One Search
- CWE-1389
- CVSS 3.1 Low
Fortinet FortiProxy: An incorrect parsing of numbers with different radices vulnerability [CWE-1389] in…
- Fortinet FortiProxy
- Fortinet FortiOS
- CWE-1389
- CVSS 6.3 Medium
github.com/google/nftable IP addresses were encoded in the wrong byte order
- CWE-20
- CWE-1286
>=0.1.0, <0.2.0 · fixed in 0.2.0
GHSA-qjvf-8748-9w7h · CVE-2024-6284