CVE-2025-9960

creationtimestamp| type| source ---|---|--- 2025-09-22 22:13:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lzhgk4zeog2j 2026-04-06 13:16:12+00:00| seen| https://bsky.app/profile/exploitdb-bot.bsky.social/post/3mitdwbbjch2p...

@andrewzagorski/admin (>=4.25.19-patch.1, <=4.25.19-patch.3), @applitools/core (>=2.3.7, <=4.57.1) +150 more potentially affected by CVE-2025-9960 via is-localhost-ip (>=1.4.0, <=3.0.1)

is-localhost-ip NPM version =1.4.0, =4.25.19-patch.1, =2.3.7, =1.0.0, =1.2.11, =0.5.1, =1.0.6, =1.0.0, =1.13.7, =1.0.0, =3.30.0, =4.22.1, =1.14.0, =1.14.1, =1.14.1, =13.11.30, =13.11.34 and more Source cves: CVE-2025-9960 Source advisory: SNYK:JS-ISLOCALHOSTIP-13004668...

CVE-2025-9960

A restriction bypass vulnerability in is-localhost-ip could allow attackers to perform Server-Side Request Forgery SSRF. This issue affects is-localhost-ip: 2.0.0...

CVE-2025-9960

A restriction bypass vulnerability in is-localhost-ip could allow attackers to perform Server-Side Request Forgery SSRF. This issue affects is-localhost-ip: 2.0.0...

CVE-2025-9960

CVE-2025-9960 affects is-localhost-ip 2.0.0 and is a restriction bypass that enables SSRF. Public sources describe that is-localhost-ip can misclassify addresses, allowing localhost checks to be bypassed (e.g., IPv6-mapped IPv4 forms such as ::ffff:127.0.0.1) to access internal resources. Several...