Lucene search
+L

1 matches found

OSV
OSV
added 2024/06/02 10:29 p.m.22 views

GHSA-2P57-RM9W-GVFP ip SSRF improper categorization in isPublic

The ip package through 2.0.1 for Node.js might allow SSRF because some IP addresses such as 127.1, 01200034567, 012.1.2.3, 000:0:0000::01, and ::fFFf:127.0.0.1 are improperly categorized as globally routable via isPublic. NOTE: this issue exists because of an incomplete fix for CVE-2023-42282...

8.1CVSS6.8AI score0.08279EPSS
SaveExploits0References6
Rows per page
Query Builder