GrepRules
Sign inPublish rule
Explore/cve-2026-44520-python-requests-ssrf-redirect

CVE-2026-44520: Python Requests Ssrf Redirect

HTTP requests made to user-supplied URLs with automatic redirection enabled are vulnerable to Server-Side Request Forgery (SSRF). An attacker can supply an external URL that redirects to a sensitive internal or loopback IP address (like 169.254.169.254), bypassing preliminary URL validation. Disable automatic redirects by explicitly passing `allow_redirects=

Provally CuratedPublic repositoryMediumMedium confidenceVerifiedApache-2.0Python
greprules fetch cve-2026-44520-python-requests-ssrf-redirect --engine opengrep

Description

HTTP requests made to user-supplied URLs with automatic redirection enabled are vulnerable to Server-Side Request Forgery (SSRF). An attacker can supply an external URL that redirects to a sensitive internal or loopback IP address (like 169.254.169.254), bypassing preliminary URL validation. Disable automatic redirects by explicitly passing `allow_redirects=

License
Apache-2.0
Source context
Public repository
Source
Provally CVE rule catalog
Validation status
Verified
Quality signals
145 downloads0 direct145 via packs
· 0 stars · Quality score 77How quality works
Included packs
2 packs