From 02f62e769d754a77a6d078b6581e63da724cedd6 Mon Sep 17 00:00:00 2001
From: Dextheking1 <Dextheking1@users.noreply.github.com>
Date: Fri, 23 Oct 2026 13:25:47 +0200
Subject: [PATCH] security: block multicast and unspecified IPs in
 _ip_is_blocked

(cherry picked from commit cd96fbea26ba1d3e5c4714c081f4bf507c57b6e0)
---
 graphify/security.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/graphify/security.py b/graphify/security.py
index 0fe0ce7a1..8027f77a9 100644
--- a/graphify/security.py
+++ b/graphify/security.py
@@ -96,6 +96,8 @@ def _ip_is_blocked(ip: ipaddress.IPv4Address | ipaddress.IPv6Address) -> bool:
         or ip.is_reserved
         or ip.is_loopback
         or ip.is_link_local
+        or ip.is_multicast
+        or ip.is_unspecified
         or ip in _CGN_NETWORK
     )