CVE-2026-101910

Published 28 September 2026 · tracked since 29 September 2026

Description

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.2.0 until 10.5.1, the Address6 isPrivate classifier in src/ipv6.ts does not recognize the NAT64 local-use range 64:ff9b:1::/48. Applications that combine isPrivate, isLoopback, and isLinkLocal for a t

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-101913
• CVE-2026-101906
• CVE-2026-101907
• CVE-2026-101908
• CVE-2026-101909
• CVE-2026-101900
• CVE-2026-101901
• CVE-2026-101902
• CVE-2026-101903
• CVE-2026-101904

→ Open the live CVE board · all tools