VULNERABILITY INTELLIGENCE
CVE-2025-9960
EPSS probability0.38%
CISA KEVNot currently listed
Published2025-09-22
Last modified2026-10-19
Description
A restriction bypass vulnerability in is-localhost-ip could allow attackers to perform Server-Side Request Forgery (SSRF). This issue affects is-localhost-ip: 2.0.0.
Weakness classification
- help@fluidattacks.com: CWE-918