{"source":1114194,"name":"express-rate-limit","dependency":"express-rate-limit","title":"express-rate-limit: IPv4-mapped IPv6 addresses bypass per-client rate limiting on servers with dual-stack network","url":"https://github.com/advisories/GHSA-46wh-pxpv-q5gq","severity":"high","versions":["0.0.0-typescript-beta-2","0.0.0-typescript-beta-3","0.0.0-typescript-beta-4","0.0.0-typescript-beta-5","0.0.0-typescript-beta-6","0.0.0-typescript-beta-7","1.0.0","1.0.1","1.0.2","1.0.3","1.1.0","1.2.0","2.0.0","2.0.1","2.0.2","2.1.0","2.1.2","2.1.3","2.2.0","2.3.0","2.3.1","2.4.0","2.5.0","2.6.0","2.7.0","2.8.0","2.8.1","2.9.0","2.10.0","2.11.0","2.12.1","2.12.2","2.13.0","2.13.1","2.14.2","3.0.0","3.0.1","3.0.2","3.0.3","3.1.0","3.1.1","3.2.0","3.2.1","3.3.0","3.3.1","3.3.2","3.4.0","3.4.1","3.5.0","3.5.1","3.5.2","3.5.3","4.0.0","4.0.1","4.0.2","4.0.3","4.0.4","5.0.0","5.1.1","5.1.3","5.2.1","5.2.2","5.2.3","5.2.5","5.2.6","5.3.0","5.4.0","5.4.1","5.5.0","5.5.1","6.0.0","6.0.1","6.0.2","6.0.3","6.0.4","6.0.5","6.1.0","6.2.0","6.2.1","6.3.0","6.4.0","6.5.1","6.5.2","6.6.0","6.7.0","6.7.1","6.7.2","6.8.0","6.8.1","6.9.0","6.10.0","6.11.0","6.11.1","6.11.2","7.0.0","7.0.1","7.0.2","7.1.0","7.1.1","7.1.2","7.1.3","7.1.4","7.1.5","7.2.0","7.3.0","7.3.1","7.4.0","7.4.1","7.5.0","7.5.1","8.0.0","8.0.1","8.0.2","8.1.0","8.1.1","8.2.0","8.2.1","8.2.2","8.3.0","8.3.1","8.3.2","8.4.0","8.4.1"],"vulnerableVersions":["8.2.0","8.2.1"],"cwe":["CWE-770"],"cvss":{"score":7.5,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},"range":">=8.2.0 <8.2.2","id":"Dt03WfIeBMhOwURWqCowSVZ2aVNozcVi0P03p+1cQ3NZiSCONc6tFcSTHi6ODbDgoBPSniAB/jpUgpoHGwcrzA=="}