| Package | Affected versions | Patched versions |
|---|---|---|
| get-ip-range | < 4.0.0 | 4.0.0 |
| get-ip-range | < 4.0.0 | 4.0.0 |
The get-ip-range package before 4.0.0 for Node.js is vulnerable to denial of service (DoS) if the range is untrusted input. An attacker could send a large range (such as 128.0.0.0/1) that causes resource exhaustion. Update get-ip-range dependency to 4.0.0 or above.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free