proxy-addr

2.0.8 · 15 Sep 2026MIT156.6M / weekRepository Homepage npm Atom feed

Your version

1.1.1

4 May 2016Where it was published

1.1.5 is the newest release of 1.x.

In short

1 fixed

Security

1 advisory affects 1.1.1; 2.0.8 fixes them

Critical
proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnetGHSA-jqcg-44mw-7w3h · 5 Oct 2026
Fixed in 2.0.8

Release note

Fix regression matching mixed versions against multiple subnets