private-ip

private-ip copied to clipboard

Private IP protection Bypass in private-ip package

10

Hello @frenchbread i am x3rz a researcher on huntr.dev as you wanted to discuss about this issue here Yes it gives 'false' because they are resolved to private IP as...

x3rz

Exported default function types not correct

1

This module exports the default as not a function, which results on projects trying to compile typescript using this module as ``` Type 'typeof import("/home/trout/tmp/js-libp2p/node_modules/private-ip/lib/index")' has no call signatures. ```...

vasco-santos

ERR_PACKAGE_PATH_NOT_EXPORTED when using private-ip version 3.0.2

2

I get an error when using private-ip package with version 3.0.2. which does not exist in version 3.0.1 `{"type":"Error","message":"No \"exports\" main defined in XXX/node_modules/private-ip/package.json","code":"ERR_PACKAGE_PATH_NOT_EXPORTED"}` in my code I try to...

svrnwnsch

Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to 3.0.3. Commits 74b2db2 3.0.3 88f1429 update eslint. lint, fix unit tests. 415d660 Snyk js braces 6838727 (#40) 190510f fix tests, skip 1 test in test/braces.expand...

dependabot[bot]

Wip: Fix range, update decencies

2

arsonik

Bumps [micromatch](https://github.com/micromatch/micromatch) from 4.0.5 to 4.0.8. Release notes Sourced from micromatch's releases. 4.0.8 Ultimate release that fixes both CVE-2024-4067 and CVE-2024-4068. We consider the issues low-priority, so even if you...

dependabot[bot]

Instead of using `@chainsafe/is-ip` you can use the Node.js internal module `node:net` which offers `isIP` as an export. This has been available since v0.3.0 at Please merge and then update...

titanism

The usage of `ip_regex.v6().test(ip)` on every invocation as well as this massive conditional (with the same regex re-used over and over, as opposed to defining as constants in-memory at top...

titanism

SSRF Bypass in private-ip

1

Hey there seems to be SSRF Bypass in `private-ip` as the multicast address `224.0.0.0/4` seems to be not included according to the reporting in: https://gist.github.com/lirantal/ed18a4493ca9fe4429957c79454a9df1 https://github.com/advisories/GHSA-9h3q-32c7-r533

svrnwnsch