CVE-2026-111997
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
ip-address before 10.7.4 allows a denial of service (CPU consumption from quadratic complexity, and application stall) via many % characters in input reaching a function call that uses the Address6 constructor.
| CWE | CWE-1333 |
| Vendor | beaugunderson |
| Product | ip-address |
| Published | Oct 18, 2026 |
Stay Ahead of the Next One
Get instant alerts for beaugunderson ip-address
Be the first to know when new unknown vulnerabilities affecting beaugunderson ip-address are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
beaugunderson / ip-address
0 < 10.7.4