https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T15:05:18.376036+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2026-avi-0901 certfr-2026-avi-0901 — De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquan… 2026-10-03T15:05:18.449654+00:00 certfr-2026-avi-0901 https://cve.radiocsirt.org/vuln/euvd-2026-252818 EUVD-2026-252818 2026-10-03T15:05:18.449699+00:00 EUVD-2026-252818 https://cve.radiocsirt.org/vuln/fkie_cve-2025-59437 fkie_cve-2025-59437 2026-10-03T15:05:18.449715+00:00

The ip (aka node-ip) package through 2.0.1 (in NPM) might allow SSRF because the IP address value 0 is improperly categorized as globally routable via isPublic. NOTE: this issue exists because of an incomplete fix for CVE-2024-29415. NOTE: in current versions of several applications, connection attempts to the IP address 0 (interpreted as 0.0.0.0) are blocked with error messages such as net::ERR_ADDRESS_INVALID. However, in some situations that depend on both application version and operating system, connection attempts to 0 and 0.0.0.0 are considered connection attempts to 127.0.0.1 (and, for this reason, a false value of isPublic would be preferable).

 https://cve.radiocsirt.org/vuln/ghsa-vvh3-7x7m-53xf GHSA-vvh3-7x7m-53xf 2026-10-03T15:05:18.449748+00:00

The ip (aka node-ip) package through 2.0.1 (in NPM) might allow SSRF because the IP address value 0 is improperly categorized as globally routable via isPublic. NOTE: this issue exists because of an incomplete fix for CVE-2024-29415. NOTE: in current versions of several applications, connection attempts to the IP address 0 (interpreted as 0.0.0.0) are blocked with error messages such as net::ERR_ADDRESS_INVALID. However, in some situations that depend on both application version and operating system, connection attempts to 0 and 0.0.0.0 are considered connection attempts to 127.0.0.1 (and, for this reason, a false value of isPublic would be preferable).

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-59437 UBUNTU-CVE-2025-59437 2026-10-03T15:05:18.449767+00:00

Affected: Ubuntu:Pro:18.04:LTS: node-ip, Ubuntu:Pro:20.04:LTS: node-ip, Ubuntu:Pro:22.04:LTS: node-ip, Ubuntu:24.04:LTS: node-ip, Ubuntu:25.10: node-ip, Ubuntu:26.04:LTS: node-ip

The ip (aka node-ip) package through 2.0.1 (in NPM) might allow SSRF because the IP address value 0 is improperly categorized as globally routable via isPublic. NOTE: this issue exists because of an incomplete fix for CVE-2024-29415. NOTE: in current versions of several applications, connection attempts to the IP address 0 (interpreted as 0.0.0.0) are blocked with error messages such as net::ERR_ADDRESS_INVALID. However, in some situations that depend on both application version and operating system, connection attempts to 0 and 0.0.0.0 are considered connection attempts to 127.0.0.1 (and, for this reason, a false value of isPublic would be preferable).