safeurl vulnerabilities

2 known vulnerabilities in safeurl from Slab. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.0 Critical severity

  safeurl: Time-of-check Time-of-use (TOCTOU) Race Condition

  CVE-2026-77972Sep 15, 2026Slab

  Time-of-check Time-of-use (TOCTOU) Race Condition in Slab safeurl allows an attacker who controls a hostname's DNS responses to reach internal network destinations that validation rejected. Validation returns a verdict and not the address it approved, so the H

• 9.0 Critical severity

  safeurl: Not Failing Securely

  CVE-2026-77866Sep 15, 2026Slab

  Server-Side Request Forgery (SSRF) vulnerability in Slab safeurl allows an attacker who controls a validated URL to reach internal network destinations the library is configured to block. Only IPv4 addresses are matched against the reserved ranges and the bloc