Skip to content

Fix ip-address SSRF vulnerabilities - #590

Merged
bcorfman merged 1 commit into
mainfrom
agent/security-ip-address-10-3-1
Aug 19, 2026
Merged

Fix ip-address SSRF vulnerabilities#590
bcorfman merged 1 commit into
mainfrom
agent/security-ip-address-10-3-1

Conversation

@bcorfman

Copy link
Copy Markdown
Owner

Summary

  • update ip-address to the patched 10.3.1 release
  • refresh the express-rate-limit override and lockfile resolution

This addresses Dependabot alert #69 and includes the patched range covering the related ip-address SSRF fixes (#60 and #61).

Validation

  • npm ls ip-address --all

@bcorfman
bcorfman force-pushed the agent/security-ip-address-10-3-1 branch 2 times, most recently from e9400f2 to 9d3f9c2 Compare August 19, 2026 01:35
@bcorfman
bcorfman force-pushed the agent/security-ip-address-10-3-1 branch from 9d3f9c2 to 871dfb9 Compare August 19, 2026 01:35
@bcorfman
bcorfman merged commit dd4912b into main Aug 19, 2026
8 checks passed
@bcorfman
bcorfman deleted the agent/security-ip-address-10-3-1 branch August 19, 2026 01:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant