low3.2
CVE-2025-59436
The ip (aka node-ip) package through 2.0.1 (in NPM) might allow SSRF because the IP address value 017700000001 is improperly categorized as globally routable v…
Impact
The ip (aka node-ip) package through 2.0.1 (in NPM) might allow SSRF because the IP address value 017700000001 is improperly categorized as globally routable via isPublic. NOTE: this issue exists because of an incomplete fix for CVE-2024-29415.
Affected products
| Product | Affected versions |
|---|---|
| Ip (Aka Node-Ip) Package | through 2.0.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.