IP vulnerabilities

2 known vulnerabilities in IP from Fedorindutny. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  ip: Server-Side Request Forgery

  CVE-2024-29415May 27, 2024FedorindutnyEPSS 8.28%

  The ip package through 2.0.1 for Node.js might allow SSRF because some IP addresses (such as 127.1, 01200034567, 012.1.2.3, 000:0:0000::01, and ::fFFf:127.0.0.1) are improperly categorized as globally routable via isPublic. NOTE: this issue exists because of a

• 9.8 Critical severity

  IP: Server-Side Request Forgery

  CVE-2023-42282Feb 8, 2024FedorindutnyEPSS 1.61%

  The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses (such as 0x7f.1) are improperly categorized as globally routable via isPublic.