zrok

Version	Released
`1.1.11` patch 1 CVE	Feb 03, 2026
`1.1.10` patch 1 CVE	Oct 17, 2025
`1.1.9` patch 1 CVE	Oct 16, 2025
`1.1.8` patch 1 CVE	Oct 06, 2025
`1.1.7` patch 1 CVE	Oct 01, 2025
`1.1.5` patch 1 CVE	Sep 22, 2025
`1.1.3` patch 1 CVE	Aug 20, 2025
`1.1.2` patch 1 CVE	Aug 12, 2025
`1.1.1` patch 1 CVE	Aug 08, 2025
`1.1.0` minor 1 CVE	Aug 07, 2025
`1.0.8` patch 1 CVE	Jul 29, 2025
`1.0.7` patch 1 CVE	Jul 18, 2025
`1.0.6` patch 1 CVE	Jun 13, 2025
`1.0.5` patch 1 CVE	Jun 09, 2025
`1.0.4` patch 1 CVE	May 02, 2025
`1.0.3` patch 1 CVE	May 01, 2025
`1.0.2` patch 1 CVE	Apr 09, 2025
`1.0.1` patch 1 CVE	Apr 01, 2025
`1.0.0` major 1 CVE	Mar 14, 2025
`0.4.49` patch 1 CVE	Feb 25, 2025
`0.4.48` patch 1 CVE	Feb 12, 2025
`0.4.47` patch 1 CVE	Jan 31, 2025
`0.4.42` patch	Oct 18, 2024
`0.4.41` patch	Oct 03, 2024
`0.4.40` patch	Sep 16, 2024
`0.4.39` patch	Aug 20, 2024
`0.4.38` patch	Jul 31, 2024
`0.4.37` patch	Jul 29, 2024
`0.4.36` patch	Jul 26, 2024
`0.4.35` patch	Jul 17, 2024
`0.4.34` patch	Jun 27, 2024
`0.4.33` patch	Jun 25, 2024
`0.4.32` patch	Jun 21, 2024
`0.4.31` patch	Jun 14, 2024
`0.4.30` patch	May 06, 2024
`0.4.29` patch	May 06, 2024
`0.4.27` patch	Apr 16, 2024
`0.4.26` patch	Mar 08, 2024
`0.4.25` patch	Feb 27, 2024
`0.4.24` patch	Feb 12, 2024
`0.4.23` initial	Jan 22, 2024

1.1.11 patch

1 CVE

CVE-2026-45568 PYSEC-2026-577 GHSA-jh67-hwqw-m5r7 Jun 29, 2026

rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths

Critical

Network Low None None

Summary

Alice exposes a Python SDK ProxyShare with a fixed target URL. Bob sends a request to the share with an absolute URL in the path. The Flask handler passes that path to urllib.parse.urljoin, which replaces Alice's configured target host with Bob's host and returns the server-side response to Bob.

Details

The Python SDK proxy route accepts every path under the share:

@app.route('/', defaults={'path': ''}, methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
@app.route('/<path:path>', methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
def proxy(path):

It constructs the outbound URL with urljoin and then sends the request:

url = urllib.parse.urljoin(self.target, path)
resp = requests.request(
    method=request.method,
    url=url,
    headers={key: value for (key, value) in request.headers
             if key.lower() not in HOP_BY_HOP_HEADERS},
    data=request.get_data(),
    cookies=request.cookies,
    allow_redirects=False,
    stream=True,
    verify=self.verify_ssl
)

When path is [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60), urljoin(self.target, path) returns [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60). The proxy sends the request to Bob's chosen URL rather than Alice's target.

Affected versions


          0.4.47


          0.4.48


          0.4.49


          1.0.0


          1.0.1


          1.0.2


          1.0.3


          1.0.4


          1.0.5


          1.0.6


          1.0.7


          1.0.8

+ 10 more


            1.1.0


            1.1.1


            1.1.10


            1.1.11


            1.1.2


            1.1.3


            1.1.5


            1.1.7


            1.1.8


            1.1.9

References

Updated Jul 01, 2026 · Source: OSV.dev

Feb 03, 2026

1.1.10 patch

1 CVE

CVE-2026-45568 PYSEC-2026-577 GHSA-jh67-hwqw-m5r7 Jun 29, 2026

rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths

Critical

Network Low None None

Summary

Alice exposes a Python SDK ProxyShare with a fixed target URL. Bob sends a request to the share with an absolute URL in the path. The Flask handler passes that path to urllib.parse.urljoin, which replaces Alice's configured target host with Bob's host and returns the server-side response to Bob.

Details

The Python SDK proxy route accepts every path under the share:

@app.route('/', defaults={'path': ''}, methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
@app.route('/<path:path>', methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
def proxy(path):

It constructs the outbound URL with urljoin and then sends the request:

url = urllib.parse.urljoin(self.target, path)
resp = requests.request(
    method=request.method,
    url=url,
    headers={key: value for (key, value) in request.headers
             if key.lower() not in HOP_BY_HOP_HEADERS},
    data=request.get_data(),
    cookies=request.cookies,
    allow_redirects=False,
    stream=True,
    verify=self.verify_ssl
)

When path is [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60), urljoin(self.target, path) returns [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60). The proxy sends the request to Bob's chosen URL rather than Alice's target.

Affected versions


          0.4.47


          0.4.48


          0.4.49


          1.0.0


          1.0.1


          1.0.2


          1.0.3


          1.0.4


          1.0.5


          1.0.6


          1.0.7


          1.0.8

+ 10 more


            1.1.0


            1.1.1


            1.1.10


            1.1.11


            1.1.2


            1.1.3


            1.1.5


            1.1.7


            1.1.8


            1.1.9

References

Updated Jul 01, 2026 · Source: OSV.dev

Oct 17, 2025

1.1.9 patch

1 CVE

CVE-2026-45568 PYSEC-2026-577 GHSA-jh67-hwqw-m5r7 Jun 29, 2026

rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths

Critical

Network Low None None

Summary

Alice exposes a Python SDK ProxyShare with a fixed target URL. Bob sends a request to the share with an absolute URL in the path. The Flask handler passes that path to urllib.parse.urljoin, which replaces Alice's configured target host with Bob's host and returns the server-side response to Bob.

Details

The Python SDK proxy route accepts every path under the share:

@app.route('/', defaults={'path': ''}, methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
@app.route('/<path:path>', methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
def proxy(path):

It constructs the outbound URL with urljoin and then sends the request:

url = urllib.parse.urljoin(self.target, path)
resp = requests.request(
    method=request.method,
    url=url,
    headers={key: value for (key, value) in request.headers
             if key.lower() not in HOP_BY_HOP_HEADERS},
    data=request.get_data(),
    cookies=request.cookies,
    allow_redirects=False,
    stream=True,
    verify=self.verify_ssl
)

When path is [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60), urljoin(self.target, path) returns [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60). The proxy sends the request to Bob's chosen URL rather than Alice's target.

Affected versions


          0.4.47


          0.4.48


          0.4.49


          1.0.0


          1.0.1


          1.0.2


          1.0.3


          1.0.4


          1.0.5


          1.0.6


          1.0.7


          1.0.8

+ 10 more


            1.1.0


            1.1.1


            1.1.10


            1.1.11


            1.1.2


            1.1.3


            1.1.5


            1.1.7


            1.1.8


            1.1.9

References

Updated Jul 01, 2026 · Source: OSV.dev

Oct 16, 2025

1.1.8 patch

1 CVE

CVE-2026-45568 PYSEC-2026-577 GHSA-jh67-hwqw-m5r7 Jun 29, 2026

rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths

Critical

Network Low None None

Summary

Alice exposes a Python SDK ProxyShare with a fixed target URL. Bob sends a request to the share with an absolute URL in the path. The Flask handler passes that path to urllib.parse.urljoin, which replaces Alice's configured target host with Bob's host and returns the server-side response to Bob.

Details

The Python SDK proxy route accepts every path under the share:

@app.route('/', defaults={'path': ''}, methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
@app.route('/<path:path>', methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
def proxy(path):

It constructs the outbound URL with urljoin and then sends the request:

url = urllib.parse.urljoin(self.target, path)
resp = requests.request(
    method=request.method,
    url=url,
    headers={key: value for (key, value) in request.headers
             if key.lower() not in HOP_BY_HOP_HEADERS},
    data=request.get_data(),
    cookies=request.cookies,
    allow_redirects=False,
    stream=True,
    verify=self.verify_ssl
)

When path is [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60), urljoin(self.target, path) returns [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60). The proxy sends the request to Bob's chosen URL rather than Alice's target.

Affected versions


          0.4.47


          0.4.48


          0.4.49


          1.0.0


          1.0.1


          1.0.2


          1.0.3


          1.0.4


          1.0.5


          1.0.6


          1.0.7


          1.0.8

+ 10 more


            1.1.0


            1.1.1


            1.1.10


            1.1.11


            1.1.2


            1.1.3


            1.1.5


            1.1.7


            1.1.8


            1.1.9

References

Updated Jul 01, 2026 · Source: OSV.dev

Oct 06, 2025

1.1.7 patch

1 CVE

CVE-2026-45568 PYSEC-2026-577 GHSA-jh67-hwqw-m5r7 Jun 29, 2026

rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths

Critical

Network Low None None

Summary

Alice exposes a Python SDK ProxyShare with a fixed target URL. Bob sends a request to the share with an absolute URL in the path. The Flask handler passes that path to urllib.parse.urljoin, which replaces Alice's configured target host with Bob's host and returns the server-side response to Bob.

Details

The Python SDK proxy route accepts every path under the share:

@app.route('/', defaults={'path': ''}, methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
@app.route('/<path:path>', methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
def proxy(path):

It constructs the outbound URL with urljoin and then sends the request:

url = urllib.parse.urljoin(self.target, path)
resp = requests.request(
    method=request.method,
    url=url,
    headers={key: value for (key, value) in request.headers
             if key.lower() not in HOP_BY_HOP_HEADERS},
    data=request.get_data(),
    cookies=request.cookies,
    allow_redirects=False,
    stream=True,
    verify=self.verify_ssl
)

When path is [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60), urljoin(self.target, path) returns [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60). The proxy sends the request to Bob's chosen URL rather than Alice's target.

Affected versions


          0.4.47


          0.4.48


          0.4.49


          1.0.0


          1.0.1


          1.0.2


          1.0.3


          1.0.4


          1.0.5


          1.0.6


          1.0.7


          1.0.8

+ 10 more


            1.1.0


            1.1.1


            1.1.10


            1.1.11


            1.1.2


            1.1.3


            1.1.5


            1.1.7


            1.1.8


            1.1.9

References

Updated Jul 01, 2026 · Source: OSV.dev

Oct 01, 2025

1.1.5 patch

1 CVE

CVE-2026-45568 PYSEC-2026-577 GHSA-jh67-hwqw-m5r7 Jun 29, 2026

rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths

Critical

Network Low None None

Summary

Alice exposes a Python SDK ProxyShare with a fixed target URL. Bob sends a request to the share with an absolute URL in the path. The Flask handler passes that path to urllib.parse.urljoin, which replaces Alice's configured target host with Bob's host and returns the server-side response to Bob.

Details

The Python SDK proxy route accepts every path under the share:

@app.route('/', defaults={'path': ''}, methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
@app.route('/<path:path>', methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
def proxy(path):

It constructs the outbound URL with urljoin and then sends the request:

url = urllib.parse.urljoin(self.target, path)
resp = requests.request(
    method=request.method,
    url=url,
    headers={key: value for (key, value) in request.headers
             if key.lower() not in HOP_BY_HOP_HEADERS},
    data=request.get_data(),
    cookies=request.cookies,
    allow_redirects=False,
    stream=True,
    verify=self.verify_ssl
)

When path is [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60), urljoin(self.target, path) returns [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60). The proxy sends the request to Bob's chosen URL rather than Alice's target.

Affected versions


          0.4.47


          0.4.48


          0.4.49


          1.0.0


          1.0.1


          1.0.2


          1.0.3


          1.0.4


          1.0.5


          1.0.6


          1.0.7


          1.0.8

+ 10 more


            1.1.0


            1.1.1


            1.1.10


            1.1.11


            1.1.2


            1.1.3


            1.1.5


            1.1.7


            1.1.8


            1.1.9

References

Updated Jul 01, 2026 · Source: OSV.dev

Sep 22, 2025

1.1.3 patch

1 CVE

CVE-2026-45568 PYSEC-2026-577 GHSA-jh67-hwqw-m5r7 Jun 29, 2026

rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths

Critical

Network Low None None

Summary

Alice exposes a Python SDK ProxyShare with a fixed target URL. Bob sends a request to the share with an absolute URL in the path. The Flask handler passes that path to urllib.parse.urljoin, which replaces Alice's configured target host with Bob's host and returns the server-side response to Bob.

Details

The Python SDK proxy route accepts every path under the share:

@app.route('/', defaults={'path': ''}, methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
@app.route('/<path:path>', methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
def proxy(path):

It constructs the outbound URL with urljoin and then sends the request:

url = urllib.parse.urljoin(self.target, path)
resp = requests.request(
    method=request.method,
    url=url,
    headers={key: value for (key, value) in request.headers
             if key.lower() not in HOP_BY_HOP_HEADERS},
    data=request.get_data(),
    cookies=request.cookies,
    allow_redirects=False,
    stream=True,
    verify=self.verify_ssl
)

When path is [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60), urljoin(self.target, path) returns [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60). The proxy sends the request to Bob's chosen URL rather than Alice's target.

Affected versions


          0.4.47


          0.4.48


          0.4.49


          1.0.0


          1.0.1


          1.0.2


          1.0.3


          1.0.4


          1.0.5


          1.0.6


          1.0.7


          1.0.8

+ 10 more


            1.1.0


            1.1.1


            1.1.10


            1.1.11


            1.1.2


            1.1.3


            1.1.5


            1.1.7


            1.1.8


            1.1.9

References

Updated Jul 01, 2026 · Source: OSV.dev

Aug 20, 2025

1.1.2 patch

1 CVE

CVE-2026-45568 PYSEC-2026-577 GHSA-jh67-hwqw-m5r7 Jun 29, 2026

rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths

Critical

Network Low None None

Summary

Alice exposes a Python SDK ProxyShare with a fixed target URL. Bob sends a request to the share with an absolute URL in the path. The Flask handler passes that path to urllib.parse.urljoin, which replaces Alice's configured target host with Bob's host and returns the server-side response to Bob.

Details

The Python SDK proxy route accepts every path under the share:

@app.route('/', defaults={'path': ''}, methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
@app.route('/<path:path>', methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
def proxy(path):

It constructs the outbound URL with urljoin and then sends the request:

url = urllib.parse.urljoin(self.target, path)
resp = requests.request(
    method=request.method,
    url=url,
    headers={key: value for (key, value) in request.headers
             if key.lower() not in HOP_BY_HOP_HEADERS},
    data=request.get_data(),
    cookies=request.cookies,
    allow_redirects=False,
    stream=True,
    verify=self.verify_ssl
)

When path is [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60), urljoin(self.target, path) returns [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60). The proxy sends the request to Bob's chosen URL rather than Alice's target.

Affected versions


          0.4.47


          0.4.48


          0.4.49


          1.0.0


          1.0.1


          1.0.2


          1.0.3


          1.0.4


          1.0.5


          1.0.6


          1.0.7


          1.0.8

+ 10 more


            1.1.0


            1.1.1


            1.1.10


            1.1.11


            1.1.2


            1.1.3


            1.1.5


            1.1.7


            1.1.8


            1.1.9

References

Updated Jul 01, 2026 · Source: OSV.dev

Aug 12, 2025

1.1.1 patch

1 CVE

CVE-2026-45568 PYSEC-2026-577 GHSA-jh67-hwqw-m5r7 Jun 29, 2026

rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths

Critical

Network Low None None

Summary

Alice exposes a Python SDK ProxyShare with a fixed target URL. Bob sends a request to the share with an absolute URL in the path. The Flask handler passes that path to urllib.parse.urljoin, which replaces Alice's configured target host with Bob's host and returns the server-side response to Bob.

Details

The Python SDK proxy route accepts every path under the share:

@app.route('/', defaults={'path': ''}, methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
@app.route('/<path:path>', methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
def proxy(path):

It constructs the outbound URL with urljoin and then sends the request:

url = urllib.parse.urljoin(self.target, path)
resp = requests.request(
    method=request.method,
    url=url,
    headers={key: value for (key, value) in request.headers
             if key.lower() not in HOP_BY_HOP_HEADERS},
    data=request.get_data(),
    cookies=request.cookies,
    allow_redirects=False,
    stream=True,
    verify=self.verify_ssl
)

When path is [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60), urljoin(self.target, path) returns [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60). The proxy sends the request to Bob's chosen URL rather than Alice's target.

Affected versions


          0.4.47


          0.4.48


          0.4.49


          1.0.0


          1.0.1


          1.0.2


          1.0.3


          1.0.4


          1.0.5


          1.0.6


          1.0.7


          1.0.8

+ 10 more


            1.1.0


            1.1.1


            1.1.10


            1.1.11


            1.1.2


            1.1.3


            1.1.5


            1.1.7


            1.1.8


            1.1.9

References

Updated Jul 01, 2026 · Source: OSV.dev

Aug 08, 2025

1.1.0 minor

1 CVE

CVE-2026-45568 PYSEC-2026-577 GHSA-jh67-hwqw-m5r7 Jun 29, 2026

rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths

Critical

Network Low None None

Summary

Alice exposes a Python SDK ProxyShare with a fixed target URL. Bob sends a request to the share with an absolute URL in the path. The Flask handler passes that path to urllib.parse.urljoin, which replaces Alice's configured target host with Bob's host and returns the server-side response to Bob.

Details

The Python SDK proxy route accepts every path under the share:

@app.route('/', defaults={'path': ''}, methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
@app.route('/<path:path>', methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
def proxy(path):

It constructs the outbound URL with urljoin and then sends the request:

url = urllib.parse.urljoin(self.target, path)
resp = requests.request(
    method=request.method,
    url=url,
    headers={key: value for (key, value) in request.headers
             if key.lower() not in HOP_BY_HOP_HEADERS},
    data=request.get_data(),
    cookies=request.cookies,
    allow_redirects=False,
    stream=True,
    verify=self.verify_ssl
)

When path is [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60), urljoin(self.target, path) returns [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60). The proxy sends the request to Bob's chosen URL rather than Alice's target.

Affected versions


          0.4.47


          0.4.48


          0.4.49


          1.0.0


          1.0.1


          1.0.2


          1.0.3


          1.0.4


          1.0.5


          1.0.6


          1.0.7


          1.0.8

+ 10 more


            1.1.0


            1.1.1


            1.1.10


            1.1.11


            1.1.2


            1.1.3


            1.1.5


            1.1.7


            1.1.8


            1.1.9

References

Updated Jul 01, 2026 · Source: OSV.dev

Aug 07, 2025

1.0.8 patch

1 CVE

CVE-2026-45568 PYSEC-2026-577 GHSA-jh67-hwqw-m5r7 Jun 29, 2026

rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths

Critical

Network Low None None

Summary

Alice exposes a Python SDK ProxyShare with a fixed target URL. Bob sends a request to the share with an absolute URL in the path. The Flask handler passes that path to urllib.parse.urljoin, which replaces Alice's configured target host with Bob's host and returns the server-side response to Bob.

Details

The Python SDK proxy route accepts every path under the share:

@app.route('/', defaults={'path': ''}, methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
@app.route('/<path:path>', methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
def proxy(path):

It constructs the outbound URL with urljoin and then sends the request:

url = urllib.parse.urljoin(self.target, path)
resp = requests.request(
    method=request.method,
    url=url,
    headers={key: value for (key, value) in request.headers
             if key.lower() not in HOP_BY_HOP_HEADERS},
    data=request.get_data(),
    cookies=request.cookies,
    allow_redirects=False,
    stream=True,
    verify=self.verify_ssl
)

When path is [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60), urljoin(self.target, path) returns [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60). The proxy sends the request to Bob's chosen URL rather than Alice's target.

Affected versions


          0.4.47


          0.4.48


          0.4.49


          1.0.0


          1.0.1


          1.0.2


          1.0.3


          1.0.4


          1.0.5


          1.0.6


          1.0.7


          1.0.8

+ 10 more


            1.1.0


            1.1.1


            1.1.10


            1.1.11


            1.1.2


            1.1.3


            1.1.5


            1.1.7


            1.1.8


            1.1.9

References

Updated Jul 01, 2026 · Source: OSV.dev

Jul 29, 2025

1.0.7 patch

1 CVE

CVE-2026-45568 PYSEC-2026-577 GHSA-jh67-hwqw-m5r7 Jun 29, 2026

rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths

Critical

Network Low None None

Summary

Alice exposes a Python SDK ProxyShare with a fixed target URL. Bob sends a request to the share with an absolute URL in the path. The Flask handler passes that path to urllib.parse.urljoin, which replaces Alice's configured target host with Bob's host and returns the server-side response to Bob.

Details

The Python SDK proxy route accepts every path under the share:

@app.route('/', defaults={'path': ''}, methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
@app.route('/<path:path>', methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
def proxy(path):

It constructs the outbound URL with urljoin and then sends the request:

url = urllib.parse.urljoin(self.target, path)
resp = requests.request(
    method=request.method,
    url=url,
    headers={key: value for (key, value) in request.headers
             if key.lower() not in HOP_BY_HOP_HEADERS},
    data=request.get_data(),
    cookies=request.cookies,
    allow_redirects=False,
    stream=True,
    verify=self.verify_ssl
)

When path is [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60), urljoin(self.target, path) returns [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60). The proxy sends the request to Bob's chosen URL rather than Alice's target.

Affected versions


          0.4.47


          0.4.48


          0.4.49


          1.0.0


          1.0.1


          1.0.2


          1.0.3


          1.0.4


          1.0.5


          1.0.6


          1.0.7


          1.0.8

+ 10 more


            1.1.0


            1.1.1


            1.1.10


            1.1.11


            1.1.2


            1.1.3


            1.1.5


            1.1.7


            1.1.8


            1.1.9

References

Updated Jul 01, 2026 · Source: OSV.dev

Jul 18, 2025

1.0.6 patch

1 CVE

CVE-2026-45568 PYSEC-2026-577 GHSA-jh67-hwqw-m5r7 Jun 29, 2026

rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths

Critical

Network Low None None

Summary

Alice exposes a Python SDK ProxyShare with a fixed target URL. Bob sends a request to the share with an absolute URL in the path. The Flask handler passes that path to urllib.parse.urljoin, which replaces Alice's configured target host with Bob's host and returns the server-side response to Bob.

Details

The Python SDK proxy route accepts every path under the share:

@app.route('/', defaults={'path': ''}, methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
@app.route('/<path:path>', methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
def proxy(path):

It constructs the outbound URL with urljoin and then sends the request:

url = urllib.parse.urljoin(self.target, path)
resp = requests.request(
    method=request.method,
    url=url,
    headers={key: value for (key, value) in request.headers
             if key.lower() not in HOP_BY_HOP_HEADERS},
    data=request.get_data(),
    cookies=request.cookies,
    allow_redirects=False,
    stream=True,
    verify=self.verify_ssl
)

When path is [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60), urljoin(self.target, path) returns [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60). The proxy sends the request to Bob's chosen URL rather than Alice's target.

Affected versions


          0.4.47


          0.4.48


          0.4.49


          1.0.0


          1.0.1


          1.0.2


          1.0.3


          1.0.4


          1.0.5


          1.0.6


          1.0.7


          1.0.8

+ 10 more


            1.1.0


            1.1.1


            1.1.10


            1.1.11


            1.1.2


            1.1.3


            1.1.5


            1.1.7


            1.1.8


            1.1.9

References

Updated Jul 01, 2026 · Source: OSV.dev

Jun 13, 2025

1.0.5 patch

1 CVE

CVE-2026-45568 PYSEC-2026-577 GHSA-jh67-hwqw-m5r7 Jun 29, 2026

rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths

Critical

Network Low None None

Summary

Alice exposes a Python SDK ProxyShare with a fixed target URL. Bob sends a request to the share with an absolute URL in the path. The Flask handler passes that path to urllib.parse.urljoin, which replaces Alice's configured target host with Bob's host and returns the server-side response to Bob.

Details

The Python SDK proxy route accepts every path under the share:

@app.route('/', defaults={'path': ''}, methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
@app.route('/<path:path>', methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
def proxy(path):

It constructs the outbound URL with urljoin and then sends the request:

url = urllib.parse.urljoin(self.target, path)
resp = requests.request(
    method=request.method,
    url=url,
    headers={key: value for (key, value) in request.headers
             if key.lower() not in HOP_BY_HOP_HEADERS},
    data=request.get_data(),
    cookies=request.cookies,
    allow_redirects=False,
    stream=True,
    verify=self.verify_ssl
)

When path is [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60), urljoin(self.target, path) returns [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60). The proxy sends the request to Bob's chosen URL rather than Alice's target.

Affected versions


          0.4.47


          0.4.48


          0.4.49


          1.0.0


          1.0.1


          1.0.2


          1.0.3


          1.0.4


          1.0.5


          1.0.6


          1.0.7


          1.0.8

+ 10 more


            1.1.0


            1.1.1


            1.1.10


            1.1.11


            1.1.2


            1.1.3


            1.1.5


            1.1.7


            1.1.8


            1.1.9

References

Updated Jul 01, 2026 · Source: OSV.dev

Jun 09, 2025

1.0.4 patch

1 CVE

CVE-2026-45568 PYSEC-2026-577 GHSA-jh67-hwqw-m5r7 Jun 29, 2026

rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths

Critical

Network Low None None

Summary

Alice exposes a Python SDK ProxyShare with a fixed target URL. Bob sends a request to the share with an absolute URL in the path. The Flask handler passes that path to urllib.parse.urljoin, which replaces Alice's configured target host with Bob's host and returns the server-side response to Bob.

Details

The Python SDK proxy route accepts every path under the share:

@app.route('/', defaults={'path': ''}, methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
@app.route('/<path:path>', methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
def proxy(path):

It constructs the outbound URL with urljoin and then sends the request:

url = urllib.parse.urljoin(self.target, path)
resp = requests.request(
    method=request.method,
    url=url,
    headers={key: value for (key, value) in request.headers
             if key.lower() not in HOP_BY_HOP_HEADERS},
    data=request.get_data(),
    cookies=request.cookies,
    allow_redirects=False,
    stream=True,
    verify=self.verify_ssl
)

When path is [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60), urljoin(self.target, path) returns [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60). The proxy sends the request to Bob's chosen URL rather than Alice's target.

Affected versions


          0.4.47


          0.4.48


          0.4.49


          1.0.0


          1.0.1


          1.0.2


          1.0.3


          1.0.4


          1.0.5


          1.0.6


          1.0.7


          1.0.8

+ 10 more


            1.1.0


            1.1.1


            1.1.10


            1.1.11


            1.1.2


            1.1.3


            1.1.5


            1.1.7


            1.1.8


            1.1.9

References

Updated Jul 01, 2026 · Source: OSV.dev

May 02, 2025

1.0.3 patch

1 CVE

CVE-2026-45568 PYSEC-2026-577 GHSA-jh67-hwqw-m5r7 Jun 29, 2026

rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths

Critical

Network Low None None

Summary

Alice exposes a Python SDK ProxyShare with a fixed target URL. Bob sends a request to the share with an absolute URL in the path. The Flask handler passes that path to urllib.parse.urljoin, which replaces Alice's configured target host with Bob's host and returns the server-side response to Bob.

Details

The Python SDK proxy route accepts every path under the share:

@app.route('/', defaults={'path': ''}, methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
@app.route('/<path:path>', methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
def proxy(path):

It constructs the outbound URL with urljoin and then sends the request:

url = urllib.parse.urljoin(self.target, path)
resp = requests.request(
    method=request.method,
    url=url,
    headers={key: value for (key, value) in request.headers
             if key.lower() not in HOP_BY_HOP_HEADERS},
    data=request.get_data(),
    cookies=request.cookies,
    allow_redirects=False,
    stream=True,
    verify=self.verify_ssl
)

When path is [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60), urljoin(self.target, path) returns [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60). The proxy sends the request to Bob's chosen URL rather than Alice's target.

Affected versions


          0.4.47


          0.4.48


          0.4.49


          1.0.0


          1.0.1


          1.0.2


          1.0.3


          1.0.4


          1.0.5


          1.0.6


          1.0.7


          1.0.8

+ 10 more


            1.1.0


            1.1.1


            1.1.10


            1.1.11


            1.1.2


            1.1.3


            1.1.5


            1.1.7


            1.1.8


            1.1.9

References

Updated Jul 01, 2026 · Source: OSV.dev

May 01, 2025

1.0.2 patch

1 CVE

CVE-2026-45568 PYSEC-2026-577 GHSA-jh67-hwqw-m5r7 Jun 29, 2026

rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths

Critical

Network Low None None

Summary

Alice exposes a Python SDK ProxyShare with a fixed target URL. Bob sends a request to the share with an absolute URL in the path. The Flask handler passes that path to urllib.parse.urljoin, which replaces Alice's configured target host with Bob's host and returns the server-side response to Bob.

Details

The Python SDK proxy route accepts every path under the share:

@app.route('/', defaults={'path': ''}, methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
@app.route('/<path:path>', methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
def proxy(path):

It constructs the outbound URL with urljoin and then sends the request:

url = urllib.parse.urljoin(self.target, path)
resp = requests.request(
    method=request.method,
    url=url,
    headers={key: value for (key, value) in request.headers
             if key.lower() not in HOP_BY_HOP_HEADERS},
    data=request.get_data(),
    cookies=request.cookies,
    allow_redirects=False,
    stream=True,
    verify=self.verify_ssl
)

When path is [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60), urljoin(self.target, path) returns [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60). The proxy sends the request to Bob's chosen URL rather than Alice's target.

Affected versions


          0.4.47


          0.4.48


          0.4.49


          1.0.0


          1.0.1


          1.0.2


          1.0.3


          1.0.4


          1.0.5


          1.0.6


          1.0.7


          1.0.8

+ 10 more


            1.1.0


            1.1.1


            1.1.10


            1.1.11


            1.1.2


            1.1.3


            1.1.5


            1.1.7


            1.1.8


            1.1.9

References

Updated Jul 01, 2026 · Source: OSV.dev

Apr 09, 2025

1.0.1 patch

1 CVE

CVE-2026-45568 PYSEC-2026-577 GHSA-jh67-hwqw-m5r7 Jun 29, 2026

rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths

Critical

Network Low None None

Summary

Alice exposes a Python SDK ProxyShare with a fixed target URL. Bob sends a request to the share with an absolute URL in the path. The Flask handler passes that path to urllib.parse.urljoin, which replaces Alice's configured target host with Bob's host and returns the server-side response to Bob.

Details

The Python SDK proxy route accepts every path under the share:

@app.route('/', defaults={'path': ''}, methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
@app.route('/<path:path>', methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
def proxy(path):

It constructs the outbound URL with urljoin and then sends the request:

url = urllib.parse.urljoin(self.target, path)
resp = requests.request(
    method=request.method,
    url=url,
    headers={key: value for (key, value) in request.headers
             if key.lower() not in HOP_BY_HOP_HEADERS},
    data=request.get_data(),
    cookies=request.cookies,
    allow_redirects=False,
    stream=True,
    verify=self.verify_ssl
)

When path is [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60), urljoin(self.target, path) returns [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60). The proxy sends the request to Bob's chosen URL rather than Alice's target.

Affected versions


          0.4.47


          0.4.48


          0.4.49


          1.0.0


          1.0.1


          1.0.2


          1.0.3


          1.0.4


          1.0.5


          1.0.6


          1.0.7


          1.0.8

+ 10 more


            1.1.0


            1.1.1


            1.1.10


            1.1.11


            1.1.2


            1.1.3


            1.1.5


            1.1.7


            1.1.8


            1.1.9

References

Updated Jul 01, 2026 · Source: OSV.dev

Apr 01, 2025

1.0.0 major

1 CVE

CVE-2026-45568 PYSEC-2026-577 GHSA-jh67-hwqw-m5r7 Jun 29, 2026

rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths

Critical

Network Low None None

Summary

Alice exposes a Python SDK ProxyShare with a fixed target URL. Bob sends a request to the share with an absolute URL in the path. The Flask handler passes that path to urllib.parse.urljoin, which replaces Alice's configured target host with Bob's host and returns the server-side response to Bob.

Details

The Python SDK proxy route accepts every path under the share:

@app.route('/', defaults={'path': ''}, methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
@app.route('/<path:path>', methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
def proxy(path):

It constructs the outbound URL with urljoin and then sends the request:

url = urllib.parse.urljoin(self.target, path)
resp = requests.request(
    method=request.method,
    url=url,
    headers={key: value for (key, value) in request.headers
             if key.lower() not in HOP_BY_HOP_HEADERS},
    data=request.get_data(),
    cookies=request.cookies,
    allow_redirects=False,
    stream=True,
    verify=self.verify_ssl
)

When path is [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60), urljoin(self.target, path) returns [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60). The proxy sends the request to Bob's chosen URL rather than Alice's target.

Affected versions


          0.4.47


          0.4.48


          0.4.49


          1.0.0


          1.0.1


          1.0.2


          1.0.3


          1.0.4


          1.0.5


          1.0.6


          1.0.7


          1.0.8

+ 10 more


            1.1.0


            1.1.1


            1.1.10


            1.1.11


            1.1.2


            1.1.3


            1.1.5


            1.1.7


            1.1.8


            1.1.9

References

Updated Jul 01, 2026 · Source: OSV.dev

Mar 14, 2025

0.4.49 patch

1 CVE

CVE-2026-45568 PYSEC-2026-577 GHSA-jh67-hwqw-m5r7 Jun 29, 2026

rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths

Critical

Network Low None None

Summary

Alice exposes a Python SDK ProxyShare with a fixed target URL. Bob sends a request to the share with an absolute URL in the path. The Flask handler passes that path to urllib.parse.urljoin, which replaces Alice's configured target host with Bob's host and returns the server-side response to Bob.

Details

The Python SDK proxy route accepts every path under the share:

@app.route('/', defaults={'path': ''}, methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
@app.route('/<path:path>', methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
def proxy(path):

It constructs the outbound URL with urljoin and then sends the request:

url = urllib.parse.urljoin(self.target, path)
resp = requests.request(
    method=request.method,
    url=url,
    headers={key: value for (key, value) in request.headers
             if key.lower() not in HOP_BY_HOP_HEADERS},
    data=request.get_data(),
    cookies=request.cookies,
    allow_redirects=False,
    stream=True,
    verify=self.verify_ssl
)

When path is [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60), urljoin(self.target, path) returns [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60). The proxy sends the request to Bob's chosen URL rather than Alice's target.

Affected versions


          0.4.47


          0.4.48


          0.4.49


          1.0.0


          1.0.1


          1.0.2


          1.0.3


          1.0.4


          1.0.5


          1.0.6


          1.0.7


          1.0.8

+ 10 more


            1.1.0


            1.1.1


            1.1.10


            1.1.11


            1.1.2


            1.1.3


            1.1.5


            1.1.7


            1.1.8


            1.1.9

References

Updated Jul 01, 2026 · Source: OSV.dev

Feb 25, 2025

0.4.48 patch

1 CVE

CVE-2026-45568 PYSEC-2026-577 GHSA-jh67-hwqw-m5r7 Jun 29, 2026

rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths

Critical

Network Low None None

Summary

Alice exposes a Python SDK ProxyShare with a fixed target URL. Bob sends a request to the share with an absolute URL in the path. The Flask handler passes that path to urllib.parse.urljoin, which replaces Alice's configured target host with Bob's host and returns the server-side response to Bob.

Details

The Python SDK proxy route accepts every path under the share:

@app.route('/', defaults={'path': ''}, methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
@app.route('/<path:path>', methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
def proxy(path):

It constructs the outbound URL with urljoin and then sends the request:

url = urllib.parse.urljoin(self.target, path)
resp = requests.request(
    method=request.method,
    url=url,
    headers={key: value for (key, value) in request.headers
             if key.lower() not in HOP_BY_HOP_HEADERS},
    data=request.get_data(),
    cookies=request.cookies,
    allow_redirects=False,
    stream=True,
    verify=self.verify_ssl
)

When path is [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60), urljoin(self.target, path) returns [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60). The proxy sends the request to Bob's chosen URL rather than Alice's target.

Affected versions


          0.4.47


          0.4.48


          0.4.49


          1.0.0


          1.0.1


          1.0.2


          1.0.3


          1.0.4


          1.0.5


          1.0.6


          1.0.7


          1.0.8

+ 10 more


            1.1.0


            1.1.1


            1.1.10


            1.1.11


            1.1.2


            1.1.3


            1.1.5


            1.1.7


            1.1.8


            1.1.9

References

Updated Jul 01, 2026 · Source: OSV.dev

Feb 12, 2025

0.4.47 patch

1 CVE

CVE-2026-45568 PYSEC-2026-577 GHSA-jh67-hwqw-m5r7 Jun 29, 2026

rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths

Critical

Network Low None None

Summary

Alice exposes a Python SDK ProxyShare with a fixed target URL. Bob sends a request to the share with an absolute URL in the path. The Flask handler passes that path to urllib.parse.urljoin, which replaces Alice's configured target host with Bob's host and returns the server-side response to Bob.

Details

The Python SDK proxy route accepts every path under the share:

@app.route('/', defaults={'path': ''}, methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
@app.route('/<path:path>', methods=['GET', 'POST', 'PUT', 'DELETE', 'PATCH', 'OPTIONS'])
def proxy(path):

It constructs the outbound URL with urljoin and then sends the request:

url = urllib.parse.urljoin(self.target, path)
resp = requests.request(
    method=request.method,
    url=url,
    headers={key: value for (key, value) in request.headers
             if key.lower() not in HOP_BY_HOP_HEADERS},
    data=request.get_data(),
    cookies=request.cookies,
    allow_redirects=False,
    stream=True,
    verify=self.verify_ssl
)

When path is [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60), urljoin(self.target, path) returns [http://127.0.0.1:19190/metadata](http://127.0.0.1:19190/metadata%60). The proxy sends the request to Bob's chosen URL rather than Alice's target.

Affected versions


          0.4.47


          0.4.48


          0.4.49


          1.0.0


          1.0.1


          1.0.2


          1.0.3


          1.0.4


          1.0.5


          1.0.6


          1.0.7


          1.0.8

+ 10 more


            1.1.0


            1.1.1


            1.1.10


            1.1.11


            1.1.2


            1.1.3


            1.1.5


            1.1.7


            1.1.8


            1.1.9

References

Updated Jul 01, 2026 · Source: OSV.dev

Jan 31, 2025

0.4.42 patch

Oct 18, 2024

0.4.41 patch

Oct 03, 2024

0.4.40 patch

Sep 16, 2024

0.4.39 patch

Aug 20, 2024

0.4.38 patch

Jul 31, 2024

0.4.37 patch

Jul 29, 2024

0.4.36 patch

Jul 26, 2024

0.4.35 patch

Jul 17, 2024

0.4.34 patch

Jun 27, 2024

0.4.33 patch

Jun 25, 2024

0.4.32 patch

Jun 21, 2024

0.4.31 patch

Jun 14, 2024

0.4.30 patch

May 06, 2024

0.4.29 patch

May 06, 2024

0.4.27 patch

Apr 16, 2024

0.4.26 patch

Mar 08, 2024

0.4.25 patch

Feb 27, 2024

0.4.24 patch

Feb 12, 2024

0.4.23 initial

Jan 22, 2024

Activity

Details