safeurl vulnerabilities (Hex)

2 vulnerabilities.

• safeurl Hex SSRF protection bypass in safeurl via IPv6 addresses and unresolvable hosts CVE-2026-77866 9.0 CriticalSeptember 15, 2026
• safeurl Hex safeurl validated address is not bound to the request, allowing DNS rebinding CVE-2026-77972 9.0 CriticalSeptember 15, 2026