Fedorindutny vulnerabilities
We track 2 vulnerabilities in Fedorindutny products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 27, 2024.
2vulnerabilities
1critical
1high
0exploited
8.9average CVSS score
Latest Fedorindutny vulnerabilities
- 8.1 High severity
ip: Server-Side Request Forgery
The ip package through 2.0.1 for Node.js might allow SSRF because some IP addresses (such as 127.1, 01200034567, 012.1.2.3, 000:0:0000::01, and ::fFFf:127.0.0.1) are improperly categorized as globally routable via isPublic. NOTE: this issue exists because of a
- 9.8 Critical severity
IP: Server-Side Request Forgery
The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses (such as 0x7f.1) are improperly categorized as globally routable via isPublic.