ip-address Security Advisories - Npm | Ecosyste.ms: Advisories

ip-address

A library for parsing IPv4 and IPv6 IP addresses in node and the browser.

View on github.com · View on npmjs.org

Security Advisories for ip-address in npm

High

3 days ago

ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass GSA_kwCzR0hTQS1td3A0LTU0ZjgtNWZocs4ABhHH

npm ip-address

Moderate

3 days ago

ip-address: a CIDR suffix on the parsed address suppresses special-use classification and can bypass SSRF and trust-boundary checks GSA_kwCzR0hTQS00eHJmLWp2NDQtaDZoaM4ABhHG

npm ip-address

Moderate

3 days ago

ip-address: misclassification of IPv4-mapped/NAT64 IPv6 addresses can bypass SSRF and trust-boundary checks GSA_kwCzR0hTQS0yMmpxLXZnNWotNnZnZ84ABhHF

npm ip-address

Moderate

3 months ago

ip-address has XSS in Address6 HTML-emitting methods GSA_kwCzR0hTQS12MnY0LTM3cjUtNXY4Z84ABWNu

npm ip-address

Filter by Severity

Moderate 3 High 1