8.2

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2026-44971

CVE-2026-44971: GuardDog: Blind GitHub URL rewrite in remote project scanning causes SSRF and `GH_TOKEN` exfiltration

GuardDog is a CLI tool to identify malicious PyPI packages. From 1.0.0 to 2.9.0, the programmatic remote project scanning path rewrites attacker-controlled repository URLs using a blind string replacement and then sends the caller's GitHub credentials with the resulting request. This allows an attacker who can influence the scanned repository URL to trigger SSRF and capture the GH_TOKEN used by GuardDog. This vulnerability is fixed in .

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2026-44971

CVE-2026-44971:

8.2

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
guarddog	pip	>= 1.0.0, <= 2.9.0

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The root cause of the vulnerability was the improper validation of a user-provided URL in the ProjectScanner.scan_remote function. The code used a blind string replacement (url.replace("github", "raw.githubusercontent")) to create the URL for fetching remote files. This did not account for crafted URLs that could manipulate the host part of the URL, leading to an SSRF vulnerability. An attacker could trick the application into sending sensitive credentials (GH_TOKEN) to an attacker-controlled server. The patch resolves this by introducing a dedicated function, _build_raw_github_url, which properly parses the URL using urllib.parse, validates that the hostname is github.com, and rejects URLs containing userinfo or explicit ports before constructing the final URL. The primary vulnerable function is ProjectScanner.scan_remote as it contained the logic that processed the malicious input and constructed the unsafe request.

Vulnerable functions

ProjectScanner.scan_remote

guarddog/scanners/scanner.py

The `scan_remote` function was vulnerable to Server-Side Request Forgery (SSRF). It used a simple string replacement on the user-provided URL to construct a request to fetch repository contents. An attacker could provide a specially crafted URL (e.g., `http://github@attacker.com/owner/repo`) which, after the string replacement, would cause the application to send a request to `attacker.com` instead of GitHub. This request would include the application's GitHub authentication token, leading to token exfiltration.

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.