duplicati-skill

clawhub:duplicati-skill

View source
B
85/100

First Seen

Feb 18, 2026

Last Scanned

Feb 22, 2026

Findings

1

Score

85/100

HIGH 1

Findings (1)

HIGH
Localhost bypass
L8

Detects alternative representations of localhost used to bypass SSRF filters

http://0.0.0.0
FIX

Prevent URL redirection from bypassing SSRF protections. Validate the final destination URL after following redirects and block redirect chains that resolve to internal addresses.

FP?

Likely FP if the match is documentation about redirect handling behavior without an actual open redirect vulnerability.