Private-ip vulnerabilities
We track 1 vulnerability in Private-ip products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 23, 2025.
1vulnerabilities
0critical
1high
0exploited
8.2average CVSS score
Latest Private-ip vulnerabilities
- 8.2 High severity
private-ip: Server-Side Request Forgery
All versions of the package private-ip are vulnerable to Server-Side Request Forgery (SSRF) where an attacker can provide an IP or hostname that resolves to a multicast IP address (224.0.0.0/4) which is not included as part of the private IP ranges in the pack