Vibe Coding
ContextForge's SSRF guard checks the resolved address then throws it away before connecting
CVE-2026-53708, published 2026-09-14, scores 6.6. Prior to 1.0.3, `/admin/gateways/test` calls `validate_gateway_test_url()` to reject private, loopback, link-local and cloud-metadata addresses, but `ResilientHttpClient` re-resolves the original hostname without binding the validated address. A caller with `gateways.read` can DNS-rebind to return a public address at validation and a metadata address at connection, bypassing `ssrf_blocked_networks` and `ssrf_dns_fail_closed` because both apply only to the validation-time result. Fixed in 1.0.3.
Source
↳ Follow the thread