proxy-addr
2.0.8 · 15 Sep 2026MIT156.6M / weekRepositoryHomepagenpmAtom feed
Your version
1.1.5 is the newest release of 1.x.
In short
1 fixed1 internal
Security
1 advisory affects 1.1.0; 2.0.8 fixes them
- Criticalproxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnetGHSA-jqcg-44mw-7w3h · 5 Oct 2026Fixed in 2.0.8
Release note
Fix accepting various invalid netmasks
IPv4 netmasks must be contingous
IPv6 addresses cannot be used as a netmask