Skip to content
OpenAdvisories

Package · npm

netmask

1 known vulnerabilities.

1 result · Feed

  • Critical 9.1
    CVE-2021-28918 Scanner template EPSS 15%

    Improper parsing of octal bytes in netmask

    Improper input validation of octal strings in netmask npm package v1.0.6 and below allows unauthenticated remote attackers to perform indeterminate SSRF, RFI, and LFI attacks on many of the dependent packages. A remote unauthenticated attacker can bypass pack…