Threats tagged 'ghsa-w8cc-xr9f-mrh7'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.5	EPSS 0.3%	CVE-2026-71272usememos memos · CWE-367 High8.5EPSS 0.3%2026-08-05CVE Database V5CVE-2026-71272 Memos' webhook dispatch function safeDialContext (internal/webhook/webhook.go) resolves the target hostname via net.DefaultResolver.LookupHost and validates the resulting IPs against reserved ranges, but then dials net.JoinHostPort(host, port) using the original hostname rather than the already-validated IP address. EPSS 0.3%Vulnerability CWE-367 #ghsa-w8cc-xr9f-mrh7	CVE Database V5	2026-08-05

Page 1 of 1