CVE-2025-8020

All versions of the package private-ip are vulnerable to Server-Side Request Forgery SSRF where an attacker can provide an IP or hostname that resolves to a multicast IP address 224.0.0.0/4 which is not included as part of the private IP ranges in the package's source code...

CVE-2025-8020

creationtimestamp| type| source ---|---|--- 2025-07-23 07:08:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lumhjbpzsd23...

@0xvaibhav/divergent-node (>=0.0.1, <=0.0.3), @0xvaibhav/ipfs-messenger (>=1.0.3, <=1.0.9) +402 more potentially affected by CVE-2025-8020 via private-ip (3.0.2)

private-ip NPM version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on private-ip and may be impacted: - @0xvaibhav/divergent-node =0.0.1, =1.0.3, =0.0.1, =0.0.2, =9.3.0, =1.0.0, =1.3.2, =1.0.1, =1.0.1, =1.1.0, =1.0.2, =1.0.3 -...

CVE-2025-8020

All versions of the package private-ip are vulnerable to Server-Side Request Forgery SSRF where an attacker can provide an IP or hostname that resolves to a multicast IP address 224.0.0.0/4 which is not included as part of the private IP ranges in the package's source code...

CVE-2025-8020

CVE-2025-8020 affects the private-ip package. All versions are reported vulnerable to Server-Side Request Forgery (SSRF) by accepting an IP/hostname that resolves to a multicast address (224.0.0.0/4), which is not excluded by the package’s private IP range checks. Multiple sources (RH, NVD, GitHu...

CVE-2025-8020

All versions of the package private-ip are vulnerable to Server-Side Request Forgery SSRF where an attacker can provide an IP or hostname that resolves to a multicast IP address 224.0.0.0/4 which is not included as part of the private IP ranges in the package's source code...

@0xvaibhav/--core (>=1.0.0, <=1.0.4), @0xvaibhav/divergent-node (>=0.0.1, <=0.0.3) +795 more potentially affected by CVE-2025-8020 via private-ip (>=1.0.5, <=3.0.2)

private-ip NPM version =1.0.5, =1.0.0, =0.0.1, =1.0.3, =0.0.1, =0.0.2, =9.3.0, =1.16.47-beta-20250807-110715-19ad6b43, =1.16.47-beta-20250807-110715-19ad6b43, =1.1.12, =1.16.33-beta-20241028-005826-60afb7c4, =1.16.47-beta-20250807-110715-19ad6b43, =1.0.0, =1.16.47-beta-20250807-110715-19ad6b43,...