Commit Graph
16 Commits
Author SHA1 Message Date
1f5fe1b237 SSRF protection: Edge case handling for CGNAT and v4/v6 mapping (Z#23236468) (#6260)
* SSRF protection: Edge case handling for CGNAT and v4/v6 mapping (Z#23236468)

* SMTP SSRF protection: Edge case handling for CGNAT and v4/v6 mapping (#6264)

---------

Co-authored-by: pajowu <engelhardt@pretix.eu>
2026-06-26 16:45:20 +02:00
Raphael MichelandRaphael Michel eb068f524c [SECURITY] Prevent reading of any local files in reportlab (CVE-2026-57535) 2026-06-25 16:46:13 +02:00
Raphael MichelandGitHub a75dbb5d62 SSRF protection: Block requests to CGNAT addresses (Z#23235334) (#6220) 2026-05-27 16:45:11 +02:00
Raphael MichelandRaphael Michel f50548cd02 Fix crash on build 2026-04-10 10:34:15 +02:00
Raphael MichelandRaphael Michel bb450e1be9 Add default protection for SSRF 2026-04-10 10:34:15 +02:00
Raphael MichelandGitHub 177a7d07fc Update license header (#5540) 2025-10-10 15:32:46 +02:00
Raphael MichelandGitHub 645c9d5900 Add "Partitioned" flag to our cookies (#3830) 2024-01-25 09:46:04 +01:00
Raphael Michel 558d0f1a4e Increase requests default timeout 2023-12-12 15:12:21 +01:00
Raphael Michel 0e832a7c41 Fix function signature of monkeypatched HTTP adapter 2023-12-12 14:37:34 +01:00
Raphael Michel c8b8fba171 Set timeout correctly 2023-12-02 14:49:31 +01:00
Raphael Michel 4580d6f710 Clean up monkeypatch code 2023-12-02 14:48:05 +01:00
Raphael Michel 2a19a423de Remove copy-paste artifact 2023-12-02 14:47:17 +01:00
Raphael Michel 409c1eef30 Add default timeout for HTTP requests 2023-12-02 14:45:28 +01:00
Raphael Michel 7545e92373 [SECURITY] Do not allow Pillow to parse EPS files 2023-09-12 11:50:01 +02:00
Raphael Michel 3be6e83f33 Add missing license header 2022-01-25 21:08:28 +01:00
Raphael Michel 9d6f11718a Work around performance issue in vobject library 2022-01-24 15:46:48 +01:00