EUVD-2026-88396Published
ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its range
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-101912 · Microsoft / collected KEV context
cve-program · CVE-2026-101912
- https://github.com/beaugunderson/ip-address/security/advisories/GHSA-j6r3-76f7-8jcv
- https://github.com/beaugunderson/ip-address/commit/1343629d57fea413644a5c9d41ff1e59619f3f28
- https://github.com/beaugunderson/ip-address/releases/tag/v10.7.1
euvd · EUVD-2026-88396
- https://github.com/beaugunderson/ip-address/security/advisories/GHSA-j6r3-76f7-8jcv
- https://github.com/beaugunderson/ip-address/commit/1343629d57fea413644a5c9d41ff1e59619f3f28
- https://github.com/beaugunderson/ip-address/releases/tag/v10.7.1
nvd · CVE-2026-101912
- https://github.com/beaugunderson/ip-address/commit/1343629d57fea413644a5c9d41ff1e59619f3f28
- https://github.com/beaugunderson/ip-address/releases/tag/v10.7.1
- https://github.com/beaugunderson/ip-address/security/advisories/GHSA-j6r3-76f7-8jcv
osv · GHSA-j6r3-76f7-8jcv
- https://github.com/beaugunderson/ip-address/security/advisories/GHSA-j6r3-76f7-8jcv
- https://nvd.nist.gov/vuln/detail/CVE-2026-101912
- https://github.com/beaugunderson/ip-address/commit/1343629d57fea413644a5c9d41ff1e59619f3f28
- https://github.com/beaugunderson/ip-address
- https://github.com/beaugunderson/ip-address/releases/tag/v10.7.1
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.