ip-address: XSS flaw enables malicious JavaScript execution

A Cross Site Scripting (XSS) vulnerability in ip-address, via Address6.group(), enables malicious JavaScript execution.

Published 3j1 sourceNotableupdated 3j

≈ 17sSpeed

The fact

Discovered on June 26, 2026, this flaw exposes websites using this module to attacks.

A patch is expected in the coming days.

Click the link to read an article on the topic:

Explore this topic

Auto-synthesis from 1 media source · identified on August 26, 2026