Threats affecting pkg:github/simple-router

simple-php-router versions up to 5.4.1.7 have an IP restriction bypass vulnerability in the IpRestrictAccess middleware. This flaw allows remote unauthenticated attackers to bypass IP whitelist and blacklist protections by spoofing certain HTTP headers such as X-Forwarded-For, CF-Connecting-IP, or Client-IP. Exploiting this vulnerability enables attackers to access IP-restricted routes that should otherwise be protected.