Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

9 records

Vendor: beaugunderson Clear all filters
TI-2026-76149 CVE-2026-111997 · GHSA-p3hm-x653-5rc6 · GHSA-rxp7-6hxx-x8q5

Denial of service in ip-address via many percent characters in input

Priority HIGH 67

ip-address before 10.7.4 allows a denial of service (CPU consumption from quadratic complexity, and application stall) via many % characters in input reaching a function call that uses the Address6 constructor.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00315 Published 2026-10-18 Fixed in 10.7.4 CWE-1333
TI-2026-65214 CVE-2026-101913 · GHSA-rpw4-54j3-4h4q

Incorrect comparison in beaugunderson ip-address

Priority MEDIUM 61

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00386 Published 2026-09-28 Fixed in 10.5.1 CWE-697
TI-2026-65213 CVE-2026-101912 · GHSA-j6r3-76f7-8jcv

Incorrect comparison in beaugunderson ip-address

Priority HIGH 67

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.0037 Published 2026-09-28 Fixed in 10.7.1 CWE-697
TI-2026-48543 CVE-2026-69198 · GHSA-4xrf-jv44-h6hh

Improper input validation in beaugunderson ip-address

Priority MEDIUM 64

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.0048 Published 2026-08-03 Partial fix · 10.2.2 CWE-20
TI-2026-48541 CVE-2026-69192 · GHSA-mwp4-54f8-5fhr

Improper input validation in beaugunderson ip-address

Priority HIGH 75

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00465 Published 2026-08-03 Partial fix · 10.3.1 CWE-20
TI-2026-30642 CVE-2026-42338 · GHSA-v2v4-37r5-5v8g

ip-address: XSS in Address6 HTML-emitting methods

Priority MEDIUM 57

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00471 Published 2026-05-12 Partial fix · 10.1.1 CWE-79