AIKIDO-2025-10358
ip-num is vulnerable to Uncaught Exception
18
Low Risk
This Affects:
ip-numTL;DR
Affected versions of this package are vulnerable to a crash when handling unexpected input in the Validator.ts:isValidIPv4CidrNotation function. After splitting the input string on '/', the CIDR portion is stored in the range variable. If this string contains a period (.), the code attempts to convert it to a BigInt, leading to a SyntaxError: Cannot convert <range> to a BigInt.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
ip-num is vulnerable to Uncaught Exception in versions 0.0.1 - 1.5.1.
How to fix this
Upgrade the ip-num library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant