| Package | Affected versions | Patched versions |
|---|---|---|
| koillection/koillection | < 1.8.4 | 1.8.4 |
An authenticated Server-Side Request Forgery (SSRF) in the custom scraper subsystem component of Benjamin Jonard Koillection v1.8.0 allows attackers to scan internal resources via supplying a crafted URL.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free