Netmask Project Netmask
2 CVEs affecting Netmask Project Netmask. Latest disclosed: 2021-04-01. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-28918 | Critical | 9.1 | 2021-04-01 | Improper input validation of octal strings in netmask npm package v1.0.6 and below allows unauthenticated remote attackers to perform indeterminate SSRF, RFI… |
CVE-2021-29418 | Medium | 5.3 | 2021-03-30 | The netmask package before 2.0.1 for Node.js mishandles certain unexpected characters in an IP address string, such as an octal digit of 9. This (in some situa… |