Query

Link to pull request with your CodeQL query:

Relevant PR: github/codeql#6214

CVE ID(s)

List the CVE ID(s) associated with this vulnerability. GitHub will automatically link CVE IDs to the GitHub Advisory Database.

• CVE-20nn-nnnnn

Report

If an application trusts an HTTP request header like X-Forwarded-For to accurately specify the remote IP address of the connecting client.

• Are you planning to discuss this vulnerability submission publicly? (Blog Post, social networks, etc). We would love to have you spread the word about the good work you are doing

Result(s)

Provide at least one useful result found by your query, on some revision of a real project.

• ip0000h/flask-docker-compose: source -> sink