Skip to content
OpenAdvisories

Package · Ubuntu

node-ip

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Low 3.2
    CVE-2025-59437

    The ip (aka node-ip) package through 2.0.1 (in NPM) might allow SSRF because the IP address value 0 is improperly categ…

    fedorindutny ip node-ip node-ip Debian Ubuntu
  • Low 3.2
    CVE-2025-59436

    The ip (aka node-ip) package through 2.0.1 (in NPM) might allow SSRF because the IP address value 017700000001 is impro…

    fedorindutny ip node-ip node-ip Debian Ubuntu
  • High 8.1
    CVE-2024-29415 Public exploit

    ip SSRF improper categorization in isPublic

    The ip package through 2.0.1 for Node.js might allow SSRF because some IP addresses (such as 127.1, 01200034567, 012.1.2.3, 000:0:0000::01, and ::fFFf:127.0.0.1) are improperly categorized as globally routable via isPublic. NOTE: this issue exists because of …

    node-ip node-ip ip Debian Ubuntu npm
  • Critical 9.8
    CVE-2023-42282

    NPM IP package incorrectly identifies some private IP addresses as public

    The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses (such as 0x7f.1) are improperly categorized as globally routable via isPublic.

    node-ip node-ip ip Debian Ubuntu npm