← CVE Intelligence

CVE-2026-111997

beaugunderson / ip-address PUBLISHED

Description (CNA)

ip-address before 10.7.4 allows a denial of service (CPU consumption from quadratic complexity, and application stall) via many % characters in input reaching a function call that uses the Address6 constructor.

Affected (CNA)

Vendor / productVersions
beaugunderson / ip-addressaffected 0 before 10.7.4

CWE

CWE-1333

References

ADP enrichment

CISA-ADP

No English description supplied.