fish-tts

clawhub:fish-tts

View source

0/100

First Seen

Feb 19, 2026

Last Scanned

Feb 22, 2026

Findings

Score

0/100

HIGH 2

MEDIUM 16

Findings (18)

HIGH

Internal IP range access SSRF_002

ssrf-cloud L83

Detects references to private/internal IP ranges in URL context

http://192.168.68.78:

FIX

Implement URL allowlisting for all outbound requests. Block requests to private IP ranges (10.x, 172.16-31.x, 192.168.x), localhost, and link-local addresses.

FP?

Likely FP if the match is a localhost URL used for local development (e.g., http://localhost:3000) in setup documentation.

HIGH

Internal IP range access SSRF_002

ssrf-cloud L96

Detects references to private/internal IP ranges in URL context

http://192.168.68.68:

FIX

Implement URL allowlisting for all outbound requests. Block requests to private IP ranges (10.x, 172.16-31.x, 192.168.x), localhost, and link-local addresses.

FP?

Likely FP if the match is a localhost URL used for local development (e.g., http://localhost:3000) in setup documentation.

MEDIUM

Internal IP range access SSRF_002

ssrf-cloud L17

Detects references to private/internal IP ranges in URL context

http://192.168.68.78:

FIX

Implement URL allowlisting for all outbound requests. Block requests to private IP ranges (10.x, 172.16-31.x, 192.168.x), localhost, and link-local addresses.

FP?

Likely FP if the match is a localhost URL used for local development (e.g., http://localhost:3000) in setup documentation.

MEDIUM

Internal IP range access SSRF_002

ssrf-cloud L27

Detects references to private/internal IP ranges in URL context

http://192.168.68.68:

FIX

Implement URL allowlisting for all outbound requests. Block requests to private IP ranges (10.x, 172.16-31.x, 192.168.x), localhost, and link-local addresses.

FP?

Likely FP if the match is a localhost URL used for local development (e.g., http://localhost:3000) in setup documentation.

MEDIUM

Internal IP range access SSRF_002

ssrf-cloud L37

Detects references to private/internal IP ranges in URL context

http://192.168.68.68:

FIX

Implement URL allowlisting for all outbound requests. Block requests to private IP ranges (10.x, 172.16-31.x, 192.168.x), localhost, and link-local addresses.

FP?

Likely FP if the match is a localhost URL used for local development (e.g., http://localhost:3000) in setup documentation.

MEDIUM

Internal IP range access SSRF_002

ssrf-cloud L38

Detects references to private/internal IP ranges in URL context

http://192.168.68.78:

FIX

Implement URL allowlisting for all outbound requests. Block requests to private IP ranges (10.x, 172.16-31.x, 192.168.x), localhost, and link-local addresses.

FP?

Likely FP if the match is a localhost URL used for local development (e.g., http://localhost:3000) in setup documentation.

MEDIUM

Internal IP range access SSRF_002

ssrf-cloud L126

Detects references to private/internal IP ranges in URL context

http://192.168.68.78:

FIX

Implement URL allowlisting for all outbound requests. Block requests to private IP ranges (10.x, 172.16-31.x, 192.168.x), localhost, and link-local addresses.

FP?

Likely FP if the match is a localhost URL used for local development (e.g., http://localhost:3000) in setup documentation.

MEDIUM

Internal IP range access SSRF_002

ssrf-cloud L128

Detects references to private/internal IP ranges in URL context

http://192.168.68.78:

FIX

Implement URL allowlisting for all outbound requests. Block requests to private IP ranges (10.x, 172.16-31.x, 192.168.x), localhost, and link-local addresses.

FP?

Likely FP if the match is a localhost URL used for local development (e.g., http://localhost:3000) in setup documentation.

MEDIUM

Internal IP range access SSRF_002

ssrf-cloud L137

Detects references to private/internal IP ranges in URL context

http://192.168.68.68:

FIX

Implement URL allowlisting for all outbound requests. Block requests to private IP ranges (10.x, 172.16-31.x, 192.168.x), localhost, and link-local addresses.

FP?

Likely FP if the match is a localhost URL used for local development (e.g., http://localhost:3000) in setup documentation.

MEDIUM

Internal IP range access SSRF_002

ssrf-cloud L140

Detects references to private/internal IP ranges in URL context

http://192.168.68.68:

FIX

Implement URL allowlisting for all outbound requests. Block requests to private IP ranges (10.x, 172.16-31.x, 192.168.x), localhost, and link-local addresses.

FP?

Likely FP if the match is a localhost URL used for local development (e.g., http://localhost:3000) in setup documentation.

MEDIUM

Internal IP range access SSRF_002

ssrf-cloud L152

Detects references to private/internal IP ranges in URL context

http://192.168.68.78:

FIX

Implement URL allowlisting for all outbound requests. Block requests to private IP ranges (10.x, 172.16-31.x, 192.168.x), localhost, and link-local addresses.

FP?

Likely FP if the match is a localhost URL used for local development (e.g., http://localhost:3000) in setup documentation.

MEDIUM

Internal IP range access SSRF_002

ssrf-cloud L160

Detects references to private/internal IP ranges in URL context

http://192.168.68.78:

FIX

Implement URL allowlisting for all outbound requests. Block requests to private IP ranges (10.x, 172.16-31.x, 192.168.x), localhost, and link-local addresses.

FP?

Likely FP if the match is a localhost URL used for local development (e.g., http://localhost:3000) in setup documentation.

MEDIUM

Internal IP range access SSRF_002

ssrf-cloud L169

Detects references to private/internal IP ranges in URL context

http://192.168.68.78:

FIX

Implement URL allowlisting for all outbound requests. Block requests to private IP ranges (10.x, 172.16-31.x, 192.168.x), localhost, and link-local addresses.

FP?

Likely FP if the match is a localhost URL used for local development (e.g., http://localhost:3000) in setup documentation.

MEDIUM

Internal IP range access SSRF_002

ssrf-cloud L177

Detects references to private/internal IP ranges in URL context

http://192.168.68.68:

FIX

Implement URL allowlisting for all outbound requests. Block requests to private IP ranges (10.x, 172.16-31.x, 192.168.x), localhost, and link-local addresses.

FP?

Likely FP if the match is a localhost URL used for local development (e.g., http://localhost:3000) in setup documentation.

MEDIUM

Internal IP range access SSRF_002

ssrf-cloud L214

Detects references to private/internal IP ranges in URL context

http://192.168.68.68:

FIX

Implement URL allowlisting for all outbound requests. Block requests to private IP ranges (10.x, 172.16-31.x, 192.168.x), localhost, and link-local addresses.

FP?

Likely FP if the match is a localhost URL used for local development (e.g., http://localhost:3000) in setup documentation.

MEDIUM

Internal IP range access SSRF_002

ssrf-cloud L215

Detects references to private/internal IP ranges in URL context

http://192.168.68.78:

FIX

Implement URL allowlisting for all outbound requests. Block requests to private IP ranges (10.x, 172.16-31.x, 192.168.x), localhost, and link-local addresses.

FP?

Likely FP if the match is a localhost URL used for local development (e.g., http://localhost:3000) in setup documentation.

MEDIUM

Internal IP range access SSRF_002

ssrf-cloud L327

Detects references to private/internal IP ranges in URL context

http://192.168.68.78:

FIX

Implement URL allowlisting for all outbound requests. Block requests to private IP ranges (10.x, 172.16-31.x, 192.168.x), localhost, and link-local addresses.

FP?

Likely FP if the match is a localhost URL used for local development (e.g., http://localhost:3000) in setup documentation.

MEDIUM

Internal IP range access SSRF_002

ssrf-cloud L337

Detects references to private/internal IP ranges in URL context

http://192.168.68.68:

FIX

Implement URL allowlisting for all outbound requests. Block requests to private IP ranges (10.x, 172.16-31.x, 192.168.x), localhost, and link-local addresses.

FP?

Likely FP if the match is a localhost URL used for local development (e.g., http://localhost:3000) in setup documentation.