dssrf has an SSRF bypass with remove_at_symbol_in_string
High-risk advisory
CVE-2026-54722
Summary
dssrf has an SSRF bypass with remove_at_symbol_in_string
Why it matters
GitHub has published a reviewed security advisory for dssrf. Prioritize it with other application dependency updates.
Operator check
Check whether dssrf is present in application dependency manifests, lockfiles, or build images. Review the GitHub advisory and upgrade to a patched version where available. CVSS score: 8.7.
Sources
PatchBrief uses public sources. It does not scan environments, verify exposure, or replace vendor guidance.