Threats tagged 'ghsa-mwp4-54f8-5fhr'

The ip-address JavaScript library prior to version 10.3.1 improperly validates input when parsing IPv4 addresses with octets that have leading zeros. This causes a mismatch between the library's interpretation and standard network parsers, potentially leading to incorrect classification of internal versus external IP addresses. This can affect security decisions such as Server-Side Request Forgery (SSRF) protections. The issue is fixed in version 10.3.1.