CVE-2021-39195: Server-Side Request Forgery (SSRF)

September 7, 2021 (updated September 14, 2021)

Misskey is an open source, decentralized microblogging platform. However, if you are using a proxy, you will need to take additional measures. As a workaround this exploit may be avoided by appropriately restricting access to private networks from the host where the application is running.

References

github.com/misskey-dev/misskey/security/advisories/GHSA-mqv7-gxh4-r5vf
nvd.nist.gov/vuln/detail/CVE-2021-39195

Code Behaviors & Features

Detect and mitigate CVE-2021-39195 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →