The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses (such as 0x7f.1) are improperly categorized as globally routable vi...

Original description

The description as published by the source.

Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV

Fix status by distribution

Fixed packages published by each distribution for this CVE

• Debian DEBIAN-CVE-2023-42282 node-ip

References

• advisory github.com
• advisory nvd.nist.gov
• advisory security.netapp.com
• patch github.com
• web cosmosofcyberspace.github.io
• web huntr.com
• web bleepingcomputer.com