A critical proxy-addr IP spoofing flaw (CVE-2026-90711) exposes Node.js apps to access control bypasses. Patch this proxy-addr IP spoofing bug today.
@securityonline.bsky.social
@securityonline.bsky.socialA critical proxy-addr IP spoofing flaw (CVE-2026-90711) exposes Node.js apps to access control bypasses. Patch this proxy-addr IP spoofing bug today.
@stackflag.bsky.socialCVE-2026-90711 - proxy-addr
The proxy-addr component used by Node.js web apps can mistakenly trust all Internet addresses when a specific network range is written in a mixed IPv4/IPv6 format. This lets an attacker…
Too many irrelevant or confusing CVEs? Use stackflag.com