beaugunderson vulnerabilities
9 published CVEs name beaugunderson among the affected products.
- 9Published CVEs9 of them scored
- 9Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-111997
ip-address before 10.7.4 allows a denial of service (CPU consumption from quadratic complexity, and application stall) via many % characters in input reaching…
beaugunderson · ip-address
Medium6.3 - CVE-2026-101913
ip-address: Address6.isLinkLocal() recognizes fe80::/64 rather than fe80::/10, allowing SSRF and trust-boundary bypass to on-link hosts
beaugunderson · ip-address
Medium6.3 - CVE-2026-101912
ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its range
beaugunderson · ip-address
Medium6.3 - CVE-2026-101911
ip-address: Address6 builds a parse diagnostic proportional to the input with no length bound, allowing a single long string to stall or crash the process
beaugunderson · ip-address
Medium6.3 - CVE-2026-101910
ip-address: no classifier recognizes the NAT64 local-use range 64:ff9b:1::/48, allowing SSRF and trust-boundary bypass
beaugunderson · ip-address
Medium6.9 - CVE-2026-69198
ip-address: a CIDR suffix on the parsed address suppresses special-use classification and can bypass SSRF and trust-boundary checks
beaugunderson · ip-address
Medium6.9 - CVE-2026-69192
ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass
beaugunderson · ip-address
High7.7 - CVE-2026-54272
ip-address: Misclassification of IPv4-mapped/NAT64 IPv6 addresses can bypass SSRF and trust-boundary checks
beaugunderson · ip-address
Medium6.9 - CVE-2026-42338
ip-address: XSS in Address6 HTML-emitting methods
beaugunderson · ip-address
Medium5.3