CVE-2026-42338
1 advisory.
npm/ip-address CVE-2026-42338: medium, EPSS 0.51%
ip-address has XSS in Address6 HTML-emitting methods
Action: Upgrade ip-address to 10.1.1 or later.
npm i ip-address@10.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 10.1.1 | - |
Fixed versions
| 10.1.1 |
Sources
- osv: GHSA-v2v4-37r5-5v8g
- https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g
- https://nvd.nist.gov/vuln/detail/CVE-2026-42338
- https://github.com/beaugunderson/ip-address
CVE-2026-42338 · published · modified · JSON