npm IP Package Code Issue Vulnerability

npm IP Package is an IP address utility for Node.js from npm, Inc. A code issue vulnerability exists in npm IP Package v.1.1.8 and earlier versions, which stems from a vulnerability that allows an attacker to execute arbitrary code and obtain sensitive information via the isPublic function...

PT-2024-2322

Name of the Vulnerable Software and Affected Versions ip package versions prior to 1.1.9 Description The issue is related to the improper categorization of certain IP addresses as globally routable via the isPublic function. This can lead to security issues such as Server-Side Request Forgery SSR...

CVE-2023-42282

The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses such as 0x7f.1 are improperly categorized as globally routable via isPublic...