{"action":"Upgrade ip to 1.1.9 or later.","affected":[{"fixed":"2.0.1","introduced":"2.0.0"},{"fixed":"1.1.9","introduced":"0"}],"component":"ip","cve_ids":["CVE-2023-42282"],"ecosystem":"npm","epss":0.01613,"exploited":false,"fixed_versions":["2.0.1","1.1.9"],"ghsa_id":"GHSA-78xj-cgh5-2h22","id":"tcs_01M5KF9CMSCS5VBWF4TDFMJR9C","modified_at":"2026-09-10T03:50:09.794882940Z","published_at":"2024-02-08T18:30:39Z","references":["https://osv.dev/vulnerability/GHSA-78xj-cgh5-2h22","https://nvd.nist.gov/vuln/detail/CVE-2023-42282","https://github.com/JoshGlazebrook/socks/issues/93#issue-2128357447","https://github.com/github/advisory-database/pull/3504#issuecomment-1937179999","https://github.com/indutny/node-ip/pull/138","https://github.com/indutny/node-ip/commit/32f468f1245574785ec080705737a579be1223aa","https://github.com/indutny/node-ip/commit/6a3ada9b471b09d5f0f5be264911ab564bf67894","https://cosmosofcyberspace.github.io/npm_ip_cve/npm_ip_cve.html","https://github.com/indutny/node-ip"],"severity":{"label":"low"},"sources":[{"source":"osv","source_id":"GHSA-78xj-cgh5-2h22","url":"https://osv.dev/vulnerability/GHSA-78xj-cgh5-2h22"}],"summary":"NPM IP package incorrectly identifies some private IP addresses as public"}