CVE-2026-101912
1 advisory.
npm/ip-address CVE-2026-101912: medium
ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its range
Action: Upgrade ip-address to 10.7.1 or later.
npm i ip-address@10.7.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 10.7.1 | - |
Fixed versions
| 10.7.1 |
Sources
- osv: GHSA-j6r3-76f7-8jcv
- https://github.com/beaugunderson/ip-address/security/advisories/GHSA-j6r3-76f7-8jcv
- https://nvd.nist.gov/vuln/detail/CVE-2026-101912
- https://github.com/beaugunderson/ip-address/commit/1343629d57fea413644a5c9d41ff1e59619f3f28
- https://github.com/beaugunderson/ip-address
- https://github.com/beaugunderson/ip-address/releases/tag/v10.7.1
CVE-2026-101912 · published · modified · JSON