From d6255b5700308b16b248232b95443167fb91cf7a Mon Sep 17 00:00:00 2001
From: Ben Aubin <baubin@makenotion.com>
Date: Sun, 19 Jan 2025 11:11:57 -0800
Subject: [PATCH] Fix for GHSA-j2hp-6m75-v4j4

---
 security/source.go | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/security/source.go b/security/source.go
index e12930fd..45c0603d 100644
--- a/security/source.go
+++ b/security/source.go
@@ -41,7 +41,7 @@ func VerifySourceNetwork(addr string) error {
 		return ErrInvalidSourceAddress
 	}
 
-	if !config.AllowLoopbackSourceAddresses && ip.IsLoopback() {
+	if !config.AllowLoopbackSourceAddresses && (ip.IsLoopback() || ip.IsUnspecified()) {
 		return ErrSourceAddressNotAllowed
 	}