B
Vendor security profile
beaugunderson
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs7
Critical0
CISA KEV0
Public exploit7
Patch rate%86
Avg. CVSS6.5
12-month vulnerability rate
0
0
0
0
0
0
1
0
0
2
4
0
CVE KEV
CVE severity distribution
7toplam CVE
High1 (14%)
Medium6 (86%)
Patch and exploitation view
%86
Verified patch
%0
CISA KEV
%100
Public exploit
6Patch available
0Partial
0Workaround
0Vendor: no patch
1Unknown
Latest vulnerabilities
6.3
CVE-2026-101913
ip-address: Address6.isLinkLocal() recognizes fe80::/64 rather than fe80::/10, allowing SSRF and trust-boundary bypass to on-link hosts
B
Patch verifiedEPSS %0
6.3
CVE-2026-101912
ip-address: isInSubnet() and isHostInSubnet() compare addresses of different families as if they shared an address space, allowing an allowlist check to admit an address outside its range
B
Patch verifiedEPSS %0
6.3
CVE-2026-101911
ip-address: Address6 builds a parse diagnostic proportional to the input with no length bound, allowing a single long string to stall or crash the process
B
Patch verifiedEPSS %0
6.9
CVE-2026-101910
ip-address: no classifier recognizes the NAT64 local-use range 64:ff9b:1::/48, allowing SSRF and trust-boundary bypass
B
Patch verifiedEPSS %0
6.9
CVE-2026-69198
ip-address: a CIDR suffix on the parsed address suppresses special-use classification and can bypass SSRF and trust-boundary checks
B
Patch verifiedEPSS %0
7.7
CVE-2026-69192
ip-address: Address4 decodes leading-zero octets as decimal while resolvers decode them as octal, allowing SSRF and trust-boundary bypass
B
Patch verifiedEPSS %1
5.3
CVE-2026-42338
ip-address: XSS in Address6 HTML-emitting methods
B
Patch status unknownEPSS %1