GHSA-9pmc-p236-855h: Ruby CSS Parser: SSRF and Local File Disclosure in `CssParser::Parser#read_remote_file`
The css_parser Ruby gem contains a vulnerability in the CssParser::Parser#read_remote_file method that allows Server-Side Request Forgery (SSRF) and local file disclosure. The method issues…
Read the full articleYou might also wanna read
Comprehensive Guide to SSRF Testing: From URL Parameters to Cloud Metadata Exploitation
The Ultimate SSRF Testing Bible: How Hackers Pivot from URL Parameters to Cloud Metadata in 2026 + Video - "Undercode Testing": Monitor hack
undercodetesting.com·26d ago
ReSSRF: An Automated SSRF Discovery Tool Using OAST-Powered Parameter Fuzzing
ReSSRF: Unleashing Next-Gen Automated SSRF Discovery with OAST-Powered Parameter Fuzzing + Video - "Undercode Testing": Monitor hackers like
undercodetesting.com·27d ago
Workers - SSRF vulnerability in @opennextjs/cloudflare proactively mitigated for all Cloudflare customers
Mitigations have been put in place for all existing and future deployments of sites with the Cloudflare adapter for Open Next in response to
Preventing server-side request forgery in Node.js applications
This article will explore SSRF, its potential risks, and the strategies to mitigate SSRF in Node.js applications.
WAF - WAF Release - 2025-06-16
This week’s roundup highlights multiple critical vulnerabilities across popular web frameworks, plugins, and enterprise platforms. The focus
CISA Orders Emergency Patching for Actively Exploited Cisco Unified CM SSRF Vulnerability
The bug affects Cisco Unified Communications Manager, and it sits in a service many organizations rely on for voice and collaboration traffi
cysecurity.news·12d ago
Comments
Sign in to join the conversation.
No comments yet. Be the first.