-
-
Notifications
You must be signed in to change notification settings - Fork 4.8k
fix: Uploading a file by providing an origin URL allows for Server-Side Request Forgery (SSRF) #9904
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
fix: Uploading a file by providing an origin URL allows for Server-Side Request Forgery (SSRF) #9904
Conversation
|
I will reformat the title to use the proper commit message syntax. |
|
🚀 Thanks for opening this pull request! |
|
Important Review skippedAuto reviews are disabled on base/target branches other than the default branch. Please check the settings in the CodeRabbit UI or the You can disable this status message by setting the ✨ Finishing touches🧪 Generate unit tests (beta)
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
✅ Snyk checks have passed. No issues have been found so far.
💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse. |
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## release-7.x.x #9904 +/- ##
=================================================
+ Coverage 93.06% 93.15% +0.08%
=================================================
Files 187 187
Lines 14989 14972 -17
=================================================
- Hits 13950 13947 -3
+ Misses 1039 1025 -14 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
## [7.5.4](7.5.3...7.5.4) (2025-11-05) ### Bug Fixes * Uploading a file by providing an origin URL allows for Server-Side Request Forgery (SSRF); fixes vulnerability [GHSA-x4qj-2f4q-r4rx](GHSA-x4qj-2f4q-r4rx) ([#9904](#9904)) ([8bbe3ef](8bbe3ef))
|
🎉 This change has been released in version 7.5.4 |
No description provided.