4 matches found
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: grafana12.4: grafana12.4-12.4.6-0.4.1.hum1 aarch64, x8664 grafana12.4-12.4.6-0.4.1.hum1.src src Security Fixes: grafana12.4: CVE-2026-69192...
SUSE CVE-2026-69192
ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.3.1, Address4 accepts an octet written with a leading zero and decodes it as decimal, while the WHATWG URL host parser, inetaton, and getaddrinfo all decode a leading zero as octal. The library...
CVE-2026-69192
creationtimestamp| type| source ---|---|--- 2026-08-03 20:31:35+00:00| seen| https://gist.github.com/alon710/572dbe4f17925376407c061da3100fba 2026-08-03 20:35:03+00:00| published-proof-of-concept| https://github.com/beaugunderson/ip-address/security/advisories/GHSA-mwp4-54f8-5fhr 2026-08-04...
CVE-2026-69192 ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass
ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.3.1, Address4 accepts an octet written with a leading zero and decodes it as decimal, while the WHATWG URL host parser, inetaton, and getaddrinfo all decode a leading zero as octal. The library...