The get-ip-range package before 4.0.0 for Node.js is vulnerable to denial of service (DoS) if the range is untrusted input. An attacker could send a large range (such as 128.0.0.0/1) that causes resource exhaustion.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Get-ip-range | Get-ip-range_project | * | 4.0.0 (excluding) |