--- title: "proxy-addr 2.0.8" description: "Latest published version of proxy-addr is 2.0.8, licensed MIT. Current as of our last registry check." url: https://inlinr.com/packages/proxy-addr lang: en --- [Packages](https://inlinr.com/packages) # proxy-addr 2.0.8 · 15 Sep 2026 MIT 156.6M / week [Repository](https://github.com/jshttp/proxy-addr) [Homepage](https://github.com/jshttp/proxy-addr#readme) [npm](https://www.npmjs.com/package/proxy-addr) [Atom feed](https://inlinr.com/packages/feed/proxy-addr) Your version ## Where each line stands [Plan an upgrade](https://inlinr.com/packages/proxy-addr/upgrade) LineNewestSecurity - 2.x 2.0.8 Safe from 2.0.8 Latest line - 1.x 1.1.5 1 open advisory, worst critical · last release Jul 2017, no longer updated [To 2.0.8](https://inlinr.com/packages/proxy-addr/upgrade/1.1.5-2.0.8) - 0.x 0.0.1 No known advisory [To 2.0.8](https://inlinr.com/packages/proxy-addr/upgrade/0.0.1-2.0.8) ## Latest releases [All 28 releases](https://inlinr.com/packages/proxy-addr/releases) 1. 2.x · latest line 2. ### [2.0.8](https://inlinr.com/packages/proxy-addr/releases/2.0.8 "Open this release") [](https://github.com/jshttp/proxy-addr/releases/tag/v2.0.8 "Read this release where it was published") 15 Sep 2026 - security Fix [CVE-2026-90711](https://www.cve.org/CVERecord?id=CVE-2026-90711 "https://www.cve.org/CVERecord?id=CVE-2026-90711") ([GHSA-jqcg-44mw-7w3h](https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h "https://github.com/jshttp/proxy-addr/security/advisories/GHSA-jqcg-44mw-7w3h")) - Add OSSF scorecard action - Fix ci pipeline and add missing Node.JS versions 3. 2.0.1 – 2.0.7 7 releases with no change for you 6 dependency updates, 1 maintenance [forwarded 0.2.0](https://inlinr.com/packages/forwarded) [ipaddr.js 1.9.1](https://inlinr.com/packages/ipaddr.js) Show each - [2.0.7](https://inlinr.com/packages/proxy-addr/releases/2.0.7 "Open this release") [](https://github.com/jshttp/proxy-addr/releases/tag/v2.0.7 "Read this release where it was published") 1 Jun 2021 [forwarded 0.2.0](https://inlinr.com/packages/forwarded) - [2.0.6](https://inlinr.com/packages/proxy-addr/releases/2.0.6 "Open this release") [](https://github.com/jshttp/proxy-addr/releases/tag/v2.0.6 "Read this release where it was published") 24 Feb 2020 [ipaddr.js 1.9.1](https://inlinr.com/packages/ipaddr.js) - [2.0.5](https://inlinr.com/packages/proxy-addr/releases/2.0.5 "Open this release") [](https://github.com/jshttp/proxy-addr/releases/tag/v2.0.5 "Read this release where it was published") 16 Apr 2019 [ipaddr.js 1.9.0](https://inlinr.com/packages/ipaddr.js) - [2.0.4](https://inlinr.com/packages/proxy-addr/releases/2.0.4 "Open this release") [](https://github.com/jshttp/proxy-addr/releases/tag/v2.0.4 "Read this release where it was published") 26 Jul 2018 [ipaddr.js 1.8.0](https://inlinr.com/packages/ipaddr.js) - [2.0.3](https://inlinr.com/packages/proxy-addr/releases/2.0.3 "Open this release") [](https://github.com/jshttp/proxy-addr/releases/tag/v2.0.3 "Read this release where it was published") 20 Feb 2018 [ipaddr.js 1.6.0](https://inlinr.com/packages/ipaddr.js) - [2.0.2](https://inlinr.com/packages/proxy-addr/releases/2.0.2 "Open this release") [](https://github.com/jshttp/proxy-addr/releases/tag/v2.0.2 "Read this release where it was published") 25 Sep 2017 docs, tests or tooling - [2.0.1](https://inlinr.com/packages/proxy-addr/releases/2.0.1 "Open this release") [](https://github.com/jshttp/proxy-addr/releases/tag/v2.0.1 "Read this release where it was published") 11 Sep 2017 [ipaddr.js 1.5.2](https://inlinr.com/packages/ipaddr.js) 4. ### [2.0.0](https://inlinr.com/packages/proxy-addr/releases/2.0.0 "Open this release") [](https://github.com/jshttp/proxy-addr/releases/tag/v2.0.0 "Read this release where it was published") 9 Aug 2017 - removed Drop support for Node.js below 0.10 Dependency tracking · free for 3 projects ## Know when your own dependencies move proxy-addr had 1 security advisory in the last 12 months. inlinr emails you the day one touches a project of yours, with the version that fixes it. - Advisories reach you An email when a critical or high advisory affects a project, before the next install. - Upgrades checked first Peer ranges, Node, ESM-only and types changes read before you bump. - Only what matters Majors and breaking notes stay; patches and sibling bumps fold into one line. [How dependency tracking works](https://inlinr.com/dependencies) ## Security [Details](https://inlinr.com/packages/proxy-addr/security) - [proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet](https://inlinr.com/advisories/GHSA-jqcg-44mw-7w3h) Critical · fixed in 2.0.8 ## Health [Details](https://inlinr.com/packages/proxy-addr/security#signals) - **Provenance**: - **Publisher**: - **Maintainers**: - **Scorecard**: - **Size**: ## Weekly downloads Registry facts last checked 4 Nov 2026\. Releases and advisories last read 4 Nov 2026.