CVE-2026-115810: Python Ssrf Raw Requests Fetch Of External Data Url
Outbound HTTP request made with the raw requests library using a URL derived from externally supplied data (parsed import document or a URL field read out of a data structure). This bypasses the application's centralized SSRF-hardened request wrapper, letting an authenticated attacker force the server to issue requests to arbitrary internal or external hosts
Pythongreprules fetch cve-2026-115810-python-ssrf-raw-requests-fetch-of-external-data-url --engine opengrepDescription
Outbound HTTP request made with the raw requests library using a URL derived from externally supplied data (parsed import document or a URL field read out of a data structure). This bypasses the application's centralized SSRF-hardened request wrapper, letting an authenticated attacker force the server to issue requests to arbitrary internal or external hosts
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.