{"schemaVersion":3,"id":"CVE-2026-69198","aliases":["UBUNTU-CVE-2026-69198","DEBIAN-CVE-2026-69198","CGA-2hj8-75w2-5gjg","CGA-2m6c-7rmj-ggrj","CGA-2x6m-293x-7grw","CGA-4797-cprq-2q72","CGA-4p3j-mwgx-3j7g","CGA-5p75-3243-jr9h","CGA-5qrg-p6hq-jcm3","CGA-6v87-83pf-q57v","CGA-7cwc-hfww-crpm","CGA-7pjv-fw3x-75qf","CGA-83v7-mcm4-8978","CGA-8cg5-6cr2-2392","CGA-8cwq-jh3f-jr6g","CGA-9h34-8cq6-f5wq","CGA-cr23-6425-w97f","CGA-fjmj-jp52-cj4v","CGA-g42v-8gwp-3vv3","CGA-g88v-fmq8-6424","CGA-gxc7-pm9g-m2v7","CGA-hgqr-fp34-pr6f","CGA-jx4p-j4h3-mgc7","CGA-m7wx-p2j5-jxcc","CGA-mfgq-v6hv-pwgf","CGA-p6v4-3rg6-wvfq","CGA-pm6r-r8gv-4m38","CGA-ppqq-m382-qv6r","CGA-qx88-8qhj-cfh5","CGA-rwfp-9rwp-c59m","CGA-vvh7-4w3r-6f3m","CGA-w7r7-6hh6-4r92","CGA-wq3w-v4p9-4659","GHSA-4xrf-jv44-h6hh","CGA-24r5-7pvp-jp5w","CGA-27h3-ffqw-chwc","CGA-2fqp-pg7m-2hfx","CGA-346f-mjw7-gq62","CGA-3567-wrmf-6cv4","CGA-38x4-565r-q9xf","CGA-3c55-ggv7-gh2r","CGA-3j84-qh67-7rqx","CGA-3rfc-cfq7-87pr","CGA-3whg-pj6q-7qpq","CGA-42p7-mx74-8frh","CGA-48rx-q7f9-3q79","CGA-4qr8-vvgx-cwpx","CGA-5h26-j78v-rgm8","CGA-7896-vp72-grcm","CGA-7g42-xv7v-m8g6","CGA-7w77-m262-pv2x","CGA-7x8x-4g9m-j8mm","CGA-8438-8jrj-m642","CGA-9w32-5qr7-8mpc","CGA-9xcq-9c26-9rhr","CGA-cghg-x67m-p4m9","CGA-cxpq-8mr6-x4m6","CGA-fg7q-g2jh-4xr2","CGA-g54g-hfpm-mwff","CGA-g79r-3q88-q2hw","CGA-gccw-6hwr-9h4m","CGA-h5qg-74gq-hmwf","CGA-hqg4-q2f4-2r5p","CGA-j7cq-4953-rwff","CGA-j8ch-98xh-rc9x","CGA-jf6w-rh7x-8pgv","CGA-jmx3-f4jx-9w42","CGA-jrgf-4828-ff3j","CGA-mf93-r4mr-r238","CGA-mhvh-jqh6-rpgj","CGA-mjvv-4pc9-9wwr","CGA-qg5v-jccw-9349","CGA-qm44-9mpx-mxhf","CGA-qx7g-4v53-v522","CGA-rmw7-4jg3-73mr","CGA-rwmf-qfpc-qhg5","CGA-rx83-wccm-jcff","CGA-v245-pf86-mc92","CGA-w6xh-6f56-x885","CGA-wg9f-rvwr-fggr","CGA-wxxq-q6ch-vmp8","CGA-x477-m9mp-c8f6","CGA-x8hq-vvc8-qrjq","CGA-xgfg-wfr9-mwv5"],"status":"published","duplicateOf":null,"title":null,"description":"ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. From 10.1.1 until 10.2.2, every special-use classification method is built on isInSubnet, which short-circuits to false whenever the address's own subnet mask is shorter than the reference range's mask. That mask comes verbatim from the CIDR suffix on the parsed input, so appending a suffix such as /0 suppresses classification entirely: isLoopback(), isPrivate(), isLinkLocal(), isCGNAT(), isMulticast(), isUnspecified(), isBroadcast(), isULA(), and getType() all report an internal address as unremarkable, while correctForm() and address still return the real internal target. An application that builds a network trust-boundary decision on these checks, for example a filter intended to block Server-Side Request Forgery, or SSRF, may therefore treat an internal target as external and allow the request. The underlying bit comparison is correct, and mask(n) already returns the first n bits of the full parsed address independently of subnetMask; the defect is solely that the containment guard sits in the classification path. This issue is fixed in version 10.2.2.","dates":{"published":"2026-08-03T19:59:05.731Z","modified":"2026-08-04T17:21:59.584Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.9,"severity":"medium","version":"4.0","versionLabel":"v4.0","source":"CVE.org","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"4.0","versionLabel":"v4.0","source":"CVE.org","score":6.9,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N","exploitability":null,"impact":null,"computed":false},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Ubuntu","score":6.9,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Debian","score":6.9,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Wolfi","score":6.9,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Npm","score":6.9,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"OSV · Chainguard","score":6.9,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N","exploitability":null,"impact":null,"computed":true},{"version":"4.0","versionLabel":"v4.0","source":"NVD","score":6.9,"severity":"medium","vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.0048,"percentile":0.4009,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.066,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.00414},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0048,"percentile":0.4009}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.00414,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.0048,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.0048,"percentile":0.4009}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-20","name":"Improper Input Validation","description":"The product receives input or data, but it does\n        not validate or incorrectly validates that the input has the\n        properties that are required to process the data safely and\n        correctly.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/20.html"},{"id":"CWE-918","name":"Server-Side Request Forgery (SSRF)","description":"The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.","type":"weakness","status":"Incomplete","abstraction":"Base","likelihoodOfExploit":null,"url":"https://cwe.mitre.org/data/definitions/918.html"}],"affected":[{"vendor":"chainguard","product":"actions-runner","name":"actions-runner","label":"actions-runner","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/actions-runner","purlType":"apk","versions":[{"text":"< 2.336.0-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.336.0-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"code-server","name":"code-server","label":"code-server","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/code-server","purlType":"apk","versions":[{"text":"< 4.130.0-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.130.0-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"graalvm-25-ce-nodejs","name":"graalvm-25-ce-nodejs","label":"graalvm-25-ce-nodejs","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/graalvm-25-ce-nodejs","purlType":"apk","versions":[{"text":"< 25.0.4-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 25.0.4-r15","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.3","name":"kibana-9.3","label":"kibana-9.3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.3","purlType":"apk","versions":[{"text":"< 9.3.8-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.3.8-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.3-iamguarded","name":"kibana-9.3-iamguarded","label":"kibana-9.3-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.3-iamguarded","purlType":"apk","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.4","name":"kibana-9.4","label":"kibana-9.4","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.4","purlType":"apk","versions":[{"text":"< 9.4.4-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.4-r15","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kibana-9.4-iamguarded","name":"kibana-9.4-iamguarded","label":"kibana-9.4-iamguarded","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kibana-9.4-iamguarded","purlType":"apk","versions":[{"text":"< 9.4.4-r15","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.4.4-r15","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines-apiserver","name":"kubeflow-pipelines-apiserver","label":"kubeflow-pipelines-apiserver","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines-apiserver","purlType":"apk","versions":[{"text":"< 2.17.2-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.17.2-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines-frontend","name":"kubeflow-pipelines-frontend","label":"kubeflow-pipelines-frontend","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines-frontend","purlType":"apk","versions":[{"text":"< 2.17.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.17.0-r3","eol":null,"hubHref":null},{"vendor":"chainguard","product":"kubeflow-pipelines-metadata-writer-compat","name":"kubeflow-pipelines-metadata-writer-compat","label":"kubeflow-pipelines-metadata-writer-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/kubeflow-pipelines-metadata-writer-compat","purlType":"apk","versions":[{"text":"< 2.17.2-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.17.2-r4","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-3-compat","name":"langfuse-3-compat","label":"langfuse-3-compat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-3-compat","purlType":"apk","versions":[{"text":"< 3.225.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.7-r6","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-3-worker","name":"langfuse-3-worker","label":"langfuse-3-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-3-worker","purlType":"apk","versions":[{"text":"< 3.225.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.1-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-4-worker","name":"langfuse-4-worker","label":"langfuse-4-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-4-worker","purlType":"apk","versions":[{"text":"< 4.6.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.6.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-3-worker","name":"langfuse-fips-3-worker","label":"langfuse-fips-3-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-3-worker","purlType":"apk","versions":[{"text":"< 3.225.1-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.1-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"langfuse-fips-4-worker","name":"langfuse-fips-4-worker","label":"langfuse-fips-4-worker","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/langfuse-fips-4-worker","purlType":"apk","versions":[{"text":"< 4.4.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.4.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"lerna","name":"lerna","label":"lerna","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/lerna","purlType":"apk","versions":[{"text":"< 9.0.7-r17","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.7-r17","eol":null,"hubHref":null},{"vendor":"chainguard","product":"librechat","name":"librechat","label":"librechat","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/librechat","purlType":"apk","versions":[{"text":"< 0.8.7-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.8.7-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"npm-12","name":"npm-12","label":"npm-12","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/npm-12","purlType":"apk","versions":[{"text":"< 12.0.2-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.0.2-r2","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-fips-security-dashboards-plugin","name":"opensearch-dashboards-2-fips-security-dashboards-plugin","label":"opensearch-dashboards-2-fips-security-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-fips-security-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.19.6-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.6-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-2-security-dashboards-plugin","name":"opensearch-dashboards-2-security-dashboards-plugin","label":"opensearch-dashboards-2-security-dashboards-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-2-security-dashboards-plugin","purlType":"apk","versions":[{"text":"< 2.19.6-r14","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.19.6-r14","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3","name":"opensearch-dashboards-3","label":"opensearch-dashboards-3","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3","purlType":"apk","versions":[{"text":"< 3.7.0-r13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7.0-r13","eol":null,"hubHref":null},{"vendor":"chainguard","product":"opensearch-dashboards-3-fips","name":"opensearch-dashboards-3-fips","label":"opensearch-dashboards-3-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/opensearch-dashboards-3-fips","purlType":"apk","versions":[{"text":"< 3.7.0-r18","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7.0-r18","eol":null,"hubHref":null},{"vendor":"chainguard","product":"prism","name":"prism","label":"prism","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/prism","purlType":"apk","versions":[{"text":"< 5.16.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.16.0-r4","eol":{"isEol":null,"eolDate":null,"matchMethod":"alias_exact","cycle":null,"product":{"name":"nutanix-prism","label":"Nutanix Prism Central","category":"server-app"}},"hubHref":null},{"vendor":"chainguard","product":"pulumi-language-nodejs","name":"pulumi-language-nodejs","label":"pulumi-language-nodejs","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/pulumi-language-nodejs","purlType":"apk","versions":[{"text":"< 3.256.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.256.0-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"renovate","name":"renovate","label":"renovate","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/renovate","purlType":"apk","versions":[{"text":"< 44.23.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 44.23.3-r1","eol":null,"hubHref":null},{"vendor":"chainguard","product":"saf","name":"saf","label":"saf","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/saf","purlType":"apk","versions":[{"text":"< 1.7.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.0-r0","eol":null,"hubHref":null},{"vendor":"chainguard","product":"sqlpad","name":"sqlpad","label":"sqlpad","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/sqlpad","purlType":"apk","versions":[{"text":"< 7.5.7-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.5.7-r31","eol":null,"hubHref":null},{"vendor":"chainguard","product":"unleash","name":"unleash","label":"unleash","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/unleash","purlType":"apk","versions":[{"text":"< 8.0.3-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.3-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"unleash-fips","name":"unleash-fips","label":"unleash-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/unleash-fips","purlType":"apk","versions":[{"text":"< 8.0.3-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 8.0.3-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"unleash-proxy","name":"unleash-proxy","label":"unleash-proxy","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/unleash-proxy","purlType":"apk","versions":[{"text":"< 1.4.19-r7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.4.19-r7","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard","name":"wazuh-dashboard","label":"wazuh-dashboard","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard","purlType":"apk","versions":[{"text":"< 4.14.7-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-fips","name":"wazuh-dashboard-fips","label":"wazuh-dashboard-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-fips","purlType":"apk","versions":[{"text":"< 4.14.7-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-security-plugin","name":"wazuh-dashboard-security-plugin","label":"wazuh-dashboard-security-plugin","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin","purlType":"apk","versions":[{"text":"< 4.14.7-r5","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r5","eol":null,"hubHref":null},{"vendor":"chainguard","product":"wazuh-dashboard-security-plugin-fips","name":"wazuh-dashboard-security-plugin-fips","label":"wazuh-dashboard-security-plugin-fips","ecosystem":"Chainguard","cpePart":null,"purl":"pkg:apk/chainguard/wazuh-dashboard-security-plugin-fips","purlType":"apk","versions":[{"text":"< 4.14.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.14.7-r6","eol":null,"hubHref":null},{"vendor":"wolfi","product":"code-server","name":"code-server","label":"code-server","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/code-server","purlType":"apk","versions":[{"text":"< 4.130.0-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 4.130.0-r6","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines-apiserver","name":"kubeflow-pipelines-apiserver","label":"kubeflow-pipelines-apiserver","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines-apiserver","purlType":"apk","versions":[{"text":"< 2.17.2-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.17.2-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines-frontend","name":"kubeflow-pipelines-frontend","label":"kubeflow-pipelines-frontend","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines-frontend","purlType":"apk","versions":[{"text":"< 2.17.0-r3","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.17.0-r3","eol":null,"hubHref":null},{"vendor":"wolfi","product":"kubeflow-pipelines-metadata-writer-compat","name":"kubeflow-pipelines-metadata-writer-compat","label":"kubeflow-pipelines-metadata-writer-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/kubeflow-pipelines-metadata-writer-compat","purlType":"apk","versions":[{"text":"< 2.17.2-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 2.17.2-r4","eol":null,"hubHref":null},{"vendor":"wolfi","product":"langfuse-3-compat","name":"langfuse-3-compat","label":"langfuse-3-compat","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/langfuse-3-compat","purlType":"apk","versions":[{"text":"< 3.225.7-r6","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.7-r6","eol":null,"hubHref":null},{"vendor":"wolfi","product":"langfuse-3-worker","name":"langfuse-3-worker","label":"langfuse-3-worker","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/langfuse-3-worker","purlType":"apk","versions":[{"text":"< 3.225.1-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.225.1-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"lerna","name":"lerna","label":"lerna","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/lerna","purlType":"apk","versions":[{"text":"< 9.0.7-r17","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 9.0.7-r17","eol":null,"hubHref":null},{"vendor":"wolfi","product":"npm-12","name":"npm-12","label":"npm-12","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/npm-12","purlType":"apk","versions":[{"text":"< 12.0.2-r2","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 12.0.2-r2","eol":null,"hubHref":null},{"vendor":"wolfi","product":"opensearch-dashboards-3","name":"opensearch-dashboards-3","label":"opensearch-dashboards-3","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/opensearch-dashboards-3","purlType":"apk","versions":[{"text":"< 3.7.0-r13","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.7.0-r13","eol":null,"hubHref":null},{"vendor":"wolfi","product":"prism","name":"prism","label":"prism","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/prism","purlType":"apk","versions":[{"text":"< 5.16.0-r4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.16.0-r4","eol":{"isEol":null,"eolDate":null,"matchMethod":"alias_exact","cycle":null,"product":{"name":"nutanix-prism","label":"Nutanix Prism Central","category":"server-app"}},"hubHref":null},{"vendor":"wolfi","product":"pulumi-language-nodejs","name":"pulumi-language-nodejs","label":"pulumi-language-nodejs","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/pulumi-language-nodejs","purlType":"apk","versions":[{"text":"< 3.256.0-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.256.0-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"renovate","name":"renovate","label":"renovate","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/renovate","purlType":"apk","versions":[{"text":"< 44.23.3-r1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 44.23.3-r1","eol":null,"hubHref":null},{"vendor":"wolfi","product":"saf","name":"saf","label":"saf","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/saf","purlType":"apk","versions":[{"text":"< 1.7.0-r0","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.7.0-r0","eol":null,"hubHref":null},{"vendor":"wolfi","product":"sqlpad","name":"sqlpad","label":"sqlpad","ecosystem":"Wolfi","cpePart":null,"purl":"pkg:apk/wolfi/sqlpad","purlType":"apk","versions":[{"text":"< 7.5.7-r31","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 7.5.7-r31","eol":null,"hubHref":null},{"vendor":"beaugunderson","product":"ip-address","name":"ip-address","label":"ip-address","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≥ 10.1.1, < 10.2.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.1.1, < 10.2.2","eol":null,"hubHref":"/vendor/beaugunderson/ip-address"},{"vendor":"debian","product":"node-ip-address","name":"node-ip-address","label":"node-ip-address","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/node-ip-address","purlType":"deb","versions":[{"text":"< 10.3.1-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 10.3.1-1","eol":null,"hubHref":null},{"vendor":"ubuntu","product":"node-ip-address","name":"node-ip-address","label":"node-ip-address","ecosystem":"Ubuntu","cpePart":null,"purl":"pkg:deb/ubuntu/node-ip-address","purlType":"deb","versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"Npm","product":"ip-address","name":"ip-address","label":"ip-address","ecosystem":"Npm","cpePart":null,"purl":"pkg:npm/ip-address","purlType":"npm","versions":[{"text":"≥ 10.1.1, < 10.2.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"≥ 10.1.1, < 10.2.2","eol":null,"hubHref":null}],"affectedCount":52,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://github.com/beaugunderson/ip-address/security/advisories/GHSA-4xrf-jv44-h6hh","label":"github.com/beaugunderson/ip-address/security/advisories/GHSA-4xrf-jv44-h6hh","hostname":"github.com","tags":["X Refsource CONFIRM","REPORT","Advisory","WEB"]},{"url":"https://github.com/beaugunderson/ip-address/commit/488fe9bc7c35363b4b090494fc38c266d217740d","label":"github.com/beaugunderson/ip-address/commit/488fe9bc7c35363b4b090494fc38c266d217740d","hostname":"github.com","tags":["X Refsource MISC","REPORT","FIX","WEB"]},{"url":"https://github.com/beaugunderson/ip-address/releases/tag/v10.2.2","label":"github.com/beaugunderson/ip-address/releases/tag/v10.2.2","hostname":"github.com","tags":["X Refsource MISC","REPORT","WEB"]},{"url":"https://ubuntu.com/security/CVE-2026-69198","label":"ubuntu.com/security/CVE-2026-69198","hostname":"ubuntu.com","tags":["REPORT"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-69198","label":"www.cve.org/CVERecord?id=CVE-2026-69198","hostname":"www.cve.org","tags":["REPORT"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2026-69198","label":"security-tracker.debian.org/tracker/CVE-2026-69198","hostname":"security-tracker.debian.org","tags":["Advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/69xxx/CVE-2026-69198.json","label":"github.com/CVEProject/cvelistV5/tree/main/cves/2026/69xxx/CVE-2026-69198.json","hostname":"github.com","tags":["Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69198","label":"nvd.nist.gov/vuln/detail/CVE-2026-69198","hostname":"nvd.nist.gov","tags":["Advisory"]},{"url":"https://github.com/beaugunderson/ip-address","label":"github.com/beaugunderson/ip-address","hostname":"github.com","tags":["PACKAGE"]}],"lineage":{"upstream":[],"downstream":["RHSA-2026:49401","RHSA-2026:50826"],"duplicates":[],"related":["CGA-2CM6-Q4C4-8MCH"]},"timeline":[{"kind":"published","date":"2026-08-03T19:59:05.731Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-08-04T17:21:59.584Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":28,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T12:20:42.138Z","stale":false,"partial":false}}