paperclip vulnerabilities

CVEs whose affected-version data names the paperclip package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-77087Critical· 9.6PoC

2mo ago

Paperclip before 0.3.1 in default local_trusted mode fails to validate Host headers, allowing attackers to execute arbitrary commands via DNS rebinding

Paperclip before 0.3.1 in default local_trusted mode fails to validate Host headers, allowing attackers to execute arbitrary commands via DNS rebinding. An attacker can craft a malicious webpage that, when visited by a developer running …

▾ Abyssalpaperclipai · paperclipEPSS 0.49%via NVD