Private-ip Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Private-ip Project records in CISA KEV

No Private-ip Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Private-ip · all components

TI-2020-17199 CVE-2020-28360 · GHSA-43ch-2h55-2vj7

MEDIUM 48

Insufficient RegEx in private-ip npm package v1.0.5 and below insufficiently filters reserved IP ranges resulting in indeterminate SSRF.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03077 Published 2020-11-23 Fixed in 2.0.0 CWE-918