SSRF in Beaugunderson Ip-address
CVE-2026-54272
ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Versions 10.1.1 through 10.2.0 are vulnerable to SSRF through misclassification of IPv4-mapped/NAT64 IPv6 addresses. Address6.getType() classifies…
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
Affected products
- Beaugunderson Ip-address — versions >= 10.1.1, < 10.2.1
Weakness classification (CWE)
References
- security-advisories@github.com (x_refsource_CONFIRM)