Skip to content

AVideo CVE-2026-43884 incomplete fix - six (or more) `isSSRFSafeURL()` call sites still discard the `$resolvedIP` out-param at master HEAD post-`603e7bf`

Moderate severity GitHub Reviewed Published May 11, 2026 in WWBN/AVideo • Updated Jun 9, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts