[Git][security-tracker-team/security-tracker][master] Add new node-ip-address issues

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
8f7bcf30 by Salvatore Bonaccorso at 2026-09-28T22:31:49+02:00
Add new node-ip-address issues

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -238,13 +238,21 @@ CVE-2026-12264 (Zohocorp ManageEngine DDI Central versions before 6201 are vulne
 CVE-2026-102010 (A flaw was found in GCC. When an application calls the erase_if functi ...)
 	TODO: check
 CVE-2026-101913 (ip-address is a library for parsing and manipulating IPv4 and IPv6 add ...)
-	TODO: check
+	- node-ip-address 10.7.2-1
+	NOTE: https://github.com/beaugunderson/ip-address/security/advisories/GHSA-rpw4-54j3-4h4q
+	NOTE: Fixed by: https://github.com/beaugunderson/ip-address/commit/d03e960c7cc3179ef25c8a44b4f94dd499625546 (v10.5.1)
 CVE-2026-101912 (ip-address is a library for parsing and manipulating IPv4 and IPv6 add ...)
-	TODO: check
+	- node-ip-address 10.7.2-1
+	NOTE: https://github.com/beaugunderson/ip-address/security/advisories/GHSA-j6r3-76f7-8jcv
+	NOTE: Fixed by: https://github.com/beaugunderson/ip-address/commit/1343629d57fea413644a5c9d41ff1e59619f3f28 (v10.7.1)
 CVE-2026-101911 (ip-address is a library for parsing and manipulating IPv4 and IPv6 add ...)
-	TODO: check
+	- node-ip-address 10.7.2-1
+	NOTE: https://github.com/beaugunderson/ip-address/security/advisories/GHSA-h3mg-xc3c-68pw
+	NOTE: Fixed by: https://github.com/beaugunderson/ip-address/commit/469ead1231b4cc059f2150c626e1e0c2895c0134 (v10.7.1)
 CVE-2026-101910 (ip-address is a library for parsing and manipulating IPv4 and IPv6 add ...)
-	TODO: check
+	- node-ip-address 10.7.2-1
+	NOTE: https://github.com/beaugunderson/ip-address/security/advisories/GHSA-2vr4-cq9g-pvrc
+	NOTE: Fixed by: https://github.com/beaugunderson/ip-address/commit/ab3dc88bcf5374344168a2ba075ca7ac4ff257f8 (v10.5.1)
 CVE-2026-101909 (Axios is a promise-based HTTP client for the browser and Node.js. From ...)
 	TODO: check
 CVE-2026-101908 (Axios is a promise-based HTTP client for the browser and Node.js. From ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8f7bcf30f7037ff6cb102d3899d224b613cae5dd

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/8f7bcf30f7037ff6cb102d3899d224b613cae5dd
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260928/69bf82d2/attachment.htm>