@sync-in/server
js · @sync-in/serverCritical
@sync-in/server: SSRF bypass via IPv4-mapped IPv6 addresses in URL download
The private IP blocklist regex in the URL download feature does not match IPv4-mapped IPv6 addresses (e.
09 Jun 2026 · act now