NPM IP package incorrectly identifies some private IP addresses as public

🗓️ 08 Feb 2024 18:30:39Reported by GitHub Advisory DatabaseType

github🔗 github.com👁 626 Views

NPM IP package wrongly flags private IPs as publi

Reporter	Title	Published	Views	Family All 79
IBM Security Bulletins	Security Bulletin: Vulnerabilities in Node.js, Golang Go, HTTP/2, NGINX, OpenSSH, Linux kernel might affect IBM Spectrum Protect Plus	4 Feb 202518:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Analytics is affected by multiple vulnerabilities	15 Apr 202503:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Network Automation 2.7.2 addresses multiple security vulnerabilities	24 Apr 202415:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Analyst Workflow app for IBM QRadar SIEM includes components with known vulnerabilities	12 Apr 202415:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Observability with Instana for Synthetic PoP is affected by Multiple Security Vulnerabilities	15 Mar 202413:21	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM Db2® on Cloud Pak for Data, and Db2 Warehouse on Cloud Pak for Data	15 Apr 202502:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Fusion is vulnerable to arbitrary code execution due to Node.js IP package.	21 May 202416:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Fusion HCI is vulnerable to arbitrary code execution due to Node.js IP package.	21 May 202416:27	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in ip	17 Dec 202510:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data is vulnerable to SSRF due to ip for Node.js (CVE-2023-42282)	8 Aug 202414:25	–	ibm

Vulners

Node

avaya ip_officeRange<1.1.9npm

avaya ip_officeMatch2.0.0npm

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-42282
cosmosofcyberspace	www.cosmosofcyberspace.github.io/npm_ip_cve/npm_ip_cve.html
github	www.github.com/JoshGlazebrook/socks/issues/93
github	www.github.com/github/advisory-database/pull/3504
github	www.github.com/indutny/node-ip/pull/138
github	www.github.com/indutny/node-ip/commit/32f468f1245574785ec080705737a579be1223aa
github	www.github.com/indutny/node-ip/commit/6a3ada9b471b09d5f0f5be264911ab564bf67894
github	www.github.com/advisories/GHSA-78xj-cgh5-2h22

18 Mar 2026 05:07Current

9.6High risk

Vulners AI Score9.6

CVSS 3.19.8

EPSS0.00652

SSVC

CWE-918