-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| nossrf | npm |
Miggo AIRoot Cause AnalysisThe vulnerability manifests in URL validation logic that checks hostnames without proper verification of their resolved IP addresses. The PoC explicitly shows the asyncValidateUrl function returning true for a hostname resolving to 127.0.0.1, indicating this function contains the flawed validation logic. As this is the primary SSRF protection function mentioned in documentation and PoC, and the CVE describes bypassing protection mechanisms, this function is clearly implicated.
JavaScriptJavaScriptOngoing coverage of React2Shell