CNNVD-202509-2620 Information
Sep 16, 2025
cve
CNNVD ID
CNNVD-202509-2620
Related CVE
- CNNVD Published: 2025-09-16
Description (Chinese)
node-ip是indutny个人开发者的一个 node.js 模块。 node-ip 2.0.1及之前版本存在代码问题漏洞，该漏洞源于IP地址值0被错误分类为全局可路由，可能导致服务端请求伪造。
Description (English)
Node-ip is a node.js module for the industny personal developer. Node-ip 2.0 and previous versions had a code problem loophole, which stemmed from the error in classifying IP address value 0 as a global route, which could lead to the forgery of service-level requests.
Hazard Level
Critical
Vulnerability Type
代码问题
Affected Vendor
个人开发者
Published
2025-09-16
Last Modified
2026-02-24
References
https://cosmosofcyberspace.github.io/CVE-Application-Document.html https://github.com/indutny/node-ip/tags https://access.redhat.com/security/cve/cve-2025-59437
Share on: