Skip to main content
cve.nowby Sazabi
← npm
npmPackage

netmask

2 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
2
Registry
npm

Advisories 2

  • Improper input validation of octal strings in netmask npm package v1.0.6 and below allows unauthenticated remote attackers to perform…

    Affected: fixed in 1.1.0; fixed in 2.0.1.

  • The netmask package before 2.0.1 for Node.js mishandles certain unexpected characters in an IP address string, such as an octal digit of 9.

    Affected: fixed in 1.1.0; fixed in 2.0.1.