fix(lightning): block SSRF path traversal in LNURL endpoints (BUG-1209)#3862

Open

davidleomay wants to merge 3 commits into

fix/lnurl-ssrf-path-traversal

Commits on Jun 10, 2026

fix(lightning): block path traversal in LNURL forwarding endpoints (BUG-1209)
davidleomay
committed
fix(lightning): add validation guards to getLnurlpLink and updateLnurlpLink
davidleomay
committed

Commits on Jun 11, 2026

fix(lightning): restore CA-validated https agent for LNbits requests (#3869)
TaprootFreak
authored