Ubuntu Security Notice USN-6643-1

Ubuntu Security Notice 6643-1 - Emre Durmaz discovered that NPM IP package incorrectly distinguished between private and public IP addresses. A remote attacker could possibly use this issue to perform Server-Side Request Forgery attacks.

addresses attacker attacks forgery ip addresses issue notice npm package private public request security security notice server server-side request forgery ubuntu usn