Vulnerability Database · npm · ip-address · Version
ip-address 5.8.2
5.8.2 is affected by 7 vulnerabilities.
The vulnerabilities that cover this exact version are listed below with the fixed version to move to. The upgrade Vulert recommends: 10.7.4.
Critical 0 High 1 Medium 6 Low 0 Unrated 0
-
Released 25 Jul 2016
Licence MIT
Also known from other sources 6
Newer releases 67
Database updated 23/Oct/2026
Release and licence data published by the npm registry. Licence information is not legal advice.
Concerned about your application's security?
Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.
01 Vulnerabilities affecting this version
ip-address 5.8.2 vulnerabilities
7 vulnerabilities cover ip-address 5.8.2. Open the full list in the database.
| Vulnerability | Severity | Fixed version | Disclosed |
|---|---|---|---|
| CVE-2026-69192: ip-address Package Allows SSRF and Trust-Boundary Bypass Due to Leading-Zero Octet Misinterpretation | 7.7 high | 10.3.1 | 03 Aug 2026 |
| CVE-2026-111997: ip-address IPv6 validation can block the event loop | 6.3 medium | 10.7.4 | 22 Oct 2026 |
| CVE-2026-101912: ip-address Package Allows Cross-Family Address Comparison Leading to Security Bypass | 6.3 medium | 10.7.1 | 29 Sep 2026 |
| CVE-2026-101911: ip-address Package Allows Denial of Service via Unbounded Input Parsing | 6.3 medium | 10.7.1 | 29 Sep 2026 |
| CVE-2026-101913: ip-address Package Vulnerability Allows SSRF and Trust-Boundary Bypass | 6.3 medium | 10.5.1 | 28 Sep 2026 |
| CVE-2026-42338: ip-address Package XSS Vulnerability in Address6 HTML Methods | 5.3 medium | 10.1.1 | 05 May 2026 |
| GHSA-p3hm-x653-5rc6: ip-address can stall applications during address parsing | N/A medium | No fix published | 18 Oct 2026 |
Looking for another version, or everything Vulert holds for ip-address?
Questions
About ip-address 5.8.2
Is ip-address 5.8.2 vulnerable?
Yes. 7 vulnerabilities in the Vulert database cover ip-address 5.8.2: 0 critical, 1 high, 6 medium and 0 low. The upgrade Vulert recommends is 10.7.4, and each entry above names the fixed version to move to.
Which version of ip-address should I use instead of 5.8.2?
10.7.4 is the version Vulert recommends for this release line. The version table on the package page lists every release with the vulnerabilities recorded against it.
Is 5.8.2 the latest release of ip-address?
No. 5.8.2 was published 25 Jul 2016, and newer releases exist. Newer is not automatically safer — the version table on the package page shows what each release carries.
How do I monitor ip-address for upcoming vulnerabilities?
Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the ip-address version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.