CLEANSTART-2026-GV61449: ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

Q: What level of access does an attacker need to exploit this issue?

The severity vector indicates network-based exploitation with low attack complexity. It does not require privileges or user interaction.

Q: What security impact is indicated?

The vector indicates low impact to confidentiality in the vulnerable component and high confidentiality impact in a subsequent system. It indicates no integrity or availability impact.

Published Nov 5, 2026

Updated

Security vulnerability affects the npm package. ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript.

Affected Software

1 affected componentFixes available

cleanstart/npm<10.9.2-r1

10.9.2-r1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/npm to a version that resolves this vulnerability.
Fixed in 10.9.2-r1

Event History

Nov 5, 2026

Advisory Published

via OSV·06:32 AM

Data Sourced

via OSV·06:32 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-69192

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The severity vector indicates network-based exploitation with low attack complexity. It does not require privileges or user interaction.

What security impact is indicated?

The vector indicates low impact to confidentiality in the vulnerable component and high confidentiality impact in a subsequent system. It indicates no integrity or availability impact.

CLEANSTART-2026-GV61449: ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What security impact is indicated?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

What security impact is indicated?