Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2024/02/08 6:30 p.m.661 views

NPM IP package incorrectly identifies some private IP addresses as public

The isPublic function in the NPM package ip doesn't correctly identify certain private IP addresses in uncommon formats such as 0x7F.1 as private. Instead, it reports them as public by returning true. This can lead to security issues such as Server-Side Request Forgery SSRF if isPublic is used to...

9.8CVSS9.6AI score0.01613EPSS
SaveExploits1References8Affected Software1
Rows per page
Query Builder