Ip@* Security Vulnerabilities and Issues — Ip@* CVE List

Lucene search

FedorindutnyIp*

2 matches found

CVE•added 2024/05/27 8:15 p.m.•1245 views

CVE-2024-29415

The ip package through 2.0.1 for Node.js might allow SSRF because some IP addresses (such as 127.1, 01200034567, 012.1.2.3, 000:0:0000::01, and ::fFFf:127.0.0.1) are improperly categorized as globally routable via isPublic. NOTE: this issue exists because of an incomplete fix for CVE-2023-42282.

8.1CVSS6.6AI score0.02587EPSS

CVE•added 2024/02/08 5:15 p.m.•443 views

CVE-2023-42282

The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses (such as 0x7f.1) are improperly categorized as globally routable via isPublic.

9.8CVSS9.3AI score0.00395EPSS