Threats affecting pkg:pypi/Cowrie

Cowrie versions prior to 2.9.0 have a server-side request forgery (SSRF) vulnerability in the emulated shell commands wget and curl. These commands perform real outbound HTTP requests to attacker-supplied destinations without rate limiting, allowing unauthenticated attackers to generate unbounded HTTP traffic toward arbitrary third-party targets. This can be abused to amplify denial-of-service attacks and mask the attacker's true source IP behind the honeypot's IP.