1 matches found
AZL-34379 CVE-2023-42282 affecting package nodejs for versions less than 16.20.2-3
The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses such as 0x7f.1 are improperly categorized as globally routable via isPublic...