fedorindutny

Products

ProductCVEsExploitedLatest
ip2–Sep 16, 2025

Exploited and recent CVEs

  • CVE-2025-59436 Low 3.2 The ip (aka node-ip) package through 2.0.1 (in NPM) might allow SSRF because the IP address value 017700000001 is improperly categorized as globally routable via isPublic. NOTE: this issue exists beca 0.1%
  • CVE-2025-59437 Low 3.2 The ip (aka node-ip) package through 2.0.1 (in NPM) might allow SSRF because the IP address value 0 is improperly categorized as globally routable via isPublic. NOTE: this issue exists because of an i 0.1%