CVE-2026-54272 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, npm, kubeflow-pipelines, code-server, pulumi, lerna...

DEBIAN-CVE-2026-54272

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Versions 10.1.1 through 10.2.0 are vulnerable to SSRF through misclassification of IPv4-mapped/NAT64 IPv6 addresses. Address6.getType classifies an address by matching it against a table of known IPv6...