THREAT OPS › Threat News › [GHSA] GHSA-4xrf-jv44-h6hh (medium) — ip-address: a CIDR suffix on the parsed address suppresses special-use classification and can bypass SSRF and trust-boundary checks
[GHSA] GHSA-4xrf-jv44-h6hh (medium) — ip-address: a CIDR suffix on the parsed address suppresses special-use classification and can bypass SSRF and trust-boundary checks
GHSA-4xrf-jv44-h6hh Severity: medium CVE: CVE-2026-69198
ip-address: a CIDR suffix on the parsed address suppresses special-use classification and can bypass SSRF and trust-boundary checks
### Summary
Every special-use classification method is built on `isInSubnet`, which short-circuits to `false` whenever the address's own subnet mask is *shorter* than the reference range's mask. That mask com
Indicators of compromise
- CVE-2026-69198cve
- http://127.0.0.1/0url
- 100.64.0.1ipv4
- 10.0.0.5/7cidr
- 10.0.0.0/8cidr
- 127.0.0.1/0cidr
- 127.0.0.0/8cidr
- 10.0.0.1/0cidr
- 172.16.5.5/0cidr
- 192.168.1.1/0cidr
- 169.254.169.254/0cidr
- 100.64.0.1/0cidr
- 0.0.0.0/0cidr
- 255.255.255.255/0cidr
Original source: https://github.com/advisories/GHSA-4xrf-jv44-h6hh