Beaugunderson

Ip-address

4 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
  • EPSS 0.28%
  • Veröffentlicht 03.08.2026 19:59:05
  • Zuletzt bearbeitet 04.08.2026 18:16:56

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.1.1 until 10.2.2, every special-use classification method is built on isInSubnet, which short-circuits to false whenever the address's own subnet mask...

  • EPSS 0.29%
  • Veröffentlicht 03.08.2026 19:56:13
  • Zuletzt bearbeitet 04.08.2026 15:16:41

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.3.1, Address4 accepts an octet written with a leading zero and decodes it as decimal, while the WHATWG URL host parser, inet_aton, and getaddrinfo...

  • EPSS 0.25%
  • Veröffentlicht 27.07.2026 17:13:09
  • Zuletzt bearbeitet 27.07.2026 18:16:56

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Versions 10.1.1 through 10.2.0 are vulnerable to SSRF through misclassification of IPv4-mapped/NAT64 IPv6 addresses. Address6.getType() classifies an address ...

Exploit
  • EPSS 0.47%
  • Veröffentlicht 12.05.2026 19:43:16
  • Zuletzt bearbeitet 20.08.2026 13:18:31

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.1.1, Address6.group() and Address6.link() do not HTML-escape attacker-controlled content before embedding it in the HTML strings they return, and ...