Server-Side Request Forgery (SSRF)

netmask is vulnerable to server-side request forgery (SSRF). The package is not able to differentiate private IP addresses as external IP addresses, and would allow an attacker to trick the application into parsing an IP address incorrectly. Successful exploitation of the vulnerability depends on how the package is used and possible attacks include server-side request forgery (SSRF) and remote/local file inclusion.