Security validation failed: Access to private network range (10.0.0.0/8) is not allowed for security

After I upgrade to latest version in my docker, my typebot can not send webhooks to N8N in my network.

We use internal ips to make it faster, but i have this message, how to fix it in my .env ?

I can not send webhooks to domain, only to internal ips

Baptiste•12/9/25, 7:30 AM

This is considered a security issue

cf https://github.com/baptisteArno/typebot.io/security/advisories/GHSA-8gq9-rw7v-3jpr

If you have a docker setup, you should be able to point to instances via hostname. Like if your service is called you could access it internally with

GitHub

AWS EKS Credentials Exposure via Server Side Request Forgery in Web...

Summary

A Server-Side Request Forgery (SSRF) vulnerability in the Typebot webhook block (HTTP Request component) functionality allows authenticated users to make arbitrary HTTP requests from t...

altomarketingOP•12/9/25, 6:00 PM

yes i have configured in /etc/hosts ip - hostname

thanks baptiste !
from Ushuaia , Argentina ! the southest city in the world !!

Aaltomarketing yes i have configured in /etc/hosts ip - hostname thanks baptiste ! from Us...

Baptiste•12/10/25, 7:58 AM

love it!!