Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: fedorindutny Clear all filters
TI-2025-36988 CVE-2025-59437 · GHSA-vvh3-7x7m-53xf

Server-side request forgery in fedorindutny ip

Priority MEDIUM 49

The ip (aka node-ip) package through 2.0.1 (in NPM) might allow SSRF because the IP address value 0 is improperly categorized as globally routable via isPublic.

CVSS 3.1LOW 3.2 Local No auth No interaction EPSS 0.00124 Published 2025-09-16 No fix listed CWE-918
TI-2025-36987 CVE-2025-59436 · GHSA-qf5v-q897-m77r

Server-side request forgery in fedorindutny ip

Priority MEDIUM 49

The ip (aka node-ip) package through 2.0.1 (in NPM) might allow SSRF because the IP address value 017700000001 is improperly categorized as globally routable via isPublic.

CVSS 3.1LOW 3.2 Local No auth No interaction EPSS 0.00124 Published 2025-09-16 Partial fix CWE-918