CVE-2026-42338

The ip-address library for JavaScript, used for parsing and manipulating IPv4 and IPv6 addresses, is vulnerable to cross-site scripting (XSS) in versions prior to 10.1.1 . The root cause is that the Address6.group() and Address6.link() methods fail to HTML-escape attacker-controlled content befor...