CVE-2021-27191

The get-ip-range package before 4.0.0 for Node.js is vulnerable to denial of service (DoS) if the range is untrusted input

published February 11, 2021

CVSS
—
EPSS
2%
Percentile
80.9
In the wild
Unconfirmed
What it is

The get-ip-range package before 4.0.0 for Node.js is vulnerable to denial of service (DoS) if the range is untrusted input. An attacker could send a large range (such as 128.0.0.0/1) that causes resource exhaustion.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02031 · 80.9th percentile
Published
2021-02-11T16:21Z
EPSS history
Timeline
  • 11 FEB 16:21Z
    The get-ip-range package before 4.0.0 for Node.js is vulnerable to denial of service (DoS) if the range is untrusted input
    cvelistv5