{"action":"Upgrade ip-address to 10.1.1 or later.","affected":[{"fixed":"10.1.1","introduced":"0"}],"component":"ip-address","cve_ids":["CVE-2026-42338"],"ecosystem":"npm","epss":0.00471,"exploited":false,"fixed_versions":["10.1.1"],"ghsa_id":"GHSA-v2v4-37r5-5v8g","id":"tcs_01M5KGAF2QH2AG2AXQ1SGZ531M","modified_at":"2026-09-10T03:50:47.603301077Z","published_at":"2026-05-05T21:50:58Z","references":["https://osv.dev/vulnerability/GHSA-v2v4-37r5-5v8g","https://github.com/beaugunderson/ip-address/security/advisories/GHSA-v2v4-37r5-5v8g","https://nvd.nist.gov/vuln/detail/CVE-2026-42338","https://github.com/beaugunderson/ip-address"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-v2v4-37r5-5v8g","url":"https://osv.dev/vulnerability/GHSA-v2v4-37r5-5v8g"}],"summary":"ip-address has XSS in Address6 HTML-emitting methods"}