Rbaskets: community verdicts

1 notable / known-exploited Rbaskets CVE the community has triaged.

ⓘ Not an exhaustive list: we focus on the findings that matter (exploited / notable). For every Rbaskets CVE, see NVD ↗.

CVE-2023-27163MED 6.5EPSS 7%
request-baskets up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /api/baskets/{name}. This vulnerability allows attackers to access network resources and sensitive information via a crafted API request.