Boris Lipmanovich comments

Repositories
Issues
Comments

Results 3 comments of


                                            Boris Lipmanovich

【安全漏洞】NPM IP package vulnerable to Server-Side Request Forgery (SSRF) attacks

Hi @xiaweiss , any updates on this topic? I see the PR https://github.com/ali-sdk/ali-oss/pull/1292 got closed... will this be handled?

【安全漏洞】NPM IP package vulnerable to Server-Side Request Forgery (SSRF) attacks

@xiaweiss, indeed :) Can anyone handle it?

【安全漏洞】NPM IP package vulnerable to Server-Side Request Forgery (SSRF) attacks

@xiaweiss, This vulnerability has CVSS 8.6. Maybe you can reopen the PR as it was closed without merging? https://github.com/ali-sdk/ali-oss/pull/1292