CVE-2026-101911
1 advisory.
npm/ip-address CVE-2026-101911: medium, EPSS 0.30%
ip-address: Address6 builds a parse diagnostic proportional to the input with no length bound, allowing a single long string to stall or crash the process
Action: Upgrade ip-address to 10.7.1 or later.
npm i ip-address@10.7.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 10.7.1 | - |
Fixed versions
| 10.7.1 |
Sources
- osv: GHSA-h3mg-xc3c-68pw
- https://github.com/beaugunderson/ip-address/security/advisories/GHSA-h3mg-xc3c-68pw
- https://nvd.nist.gov/vuln/detail/CVE-2026-101911
- https://github.com/beaugunderson/ip-address/commit/469ead1231b4cc059f2150c626e1e0c2895c0134
- https://github.com/beaugunderson/ip-address/commit/8b34a21e0839b37c094066816fb2c2c48a2adcf5
- https://github.com/beaugunderson/ip-address
- https://github.com/beaugunderson/ip-address/releases/tag/v10.7.1
CVE-2026-101911 · published · modified · JSON