#521·cors-anywhereCVE-2020-36851: Unpatched: Full SSRF: Proxy Does Not block RFC 1918 IP ranges nor Cloud IDMSAuthor: JLLeitschuhCreated Sep 25, 2025Updated Sep 26, 2025 https://www.cve.org/cverecord?id=CVE-2020-36851 https://github.com/SocketDev/security-research/security/advisories/GHSA-9wmg-93pw-fc3g Source: Rob--W/cors-anywhereView original on GitHubView discussion on GitHub