CVE-2026-69198
- EPSS 0.28%
- Veröffentlicht 03.08.2026 19:59:05
- Zuletzt bearbeitet 04.08.2026 18:16:56
ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.1.1 until 10.2.2, every special-use classification method is built on isInSubnet, which short-circuits to false whenever the address's own subnet mask...
CVE-2026-69192
- EPSS 0.29%
- Veröffentlicht 03.08.2026 19:56:13
- Zuletzt bearbeitet 04.08.2026 15:16:41
ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.3.1, Address4 accepts an octet written with a leading zero and decodes it as decimal, while the WHATWG URL host parser, inet_aton, and getaddrinfo...
CVE-2026-54272
- EPSS 0.25%
- Veröffentlicht 27.07.2026 17:13:09
- Zuletzt bearbeitet 27.07.2026 18:16:56
ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Versions 10.1.1 through 10.2.0 are vulnerable to SSRF through misclassification of IPv4-mapped/NAT64 IPv6 addresses. Address6.getType() classifies an address ...
CVE-2026-42338
- EPSS 0.47%
- Veröffentlicht 12.05.2026 19:43:16
- Zuletzt bearbeitet 20.08.2026 13:18:31
ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.1.1, Address6.group() and Address6.link() do not HTML-escape attacker-controlled content before embedding it in the HTML strings they return, and ...