Description
ntfy before 2.22.0 allows SSRF because of an unanchored regular expression for web push endpoint URLs.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
ntfy ntfy
Default version status: unaffected
0 to < 2.22.0affected