What is GHSA-p3hm-x653-5rc6?

GHSA-p3hm-x653-5rc6 is a security advisory published by GitHub Security Advisories with Medium severity. ip-address before 10.7.4 allows a denial of service (CPU consumption from quadratic complexity,...

Which CVE IDs does GHSA-p3hm-x653-5rc6 cover?

GHSA-p3hm-x653-5rc6 covers the following CVE IDs: CVE-2026-111997. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

GHSA-p3hm-x653-5rc6Medium

ip-address before 10.7.4 allows a denial of service (CPU consumption from quadratic complexity,...

Vendor

GitHub Security Advisories

Published

October 18, 2026

Last Modified

October 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-111997 →

📋 Description

ip-address before 10.7.4 allows a denial of service (CPU consumption from quadratic complexity, and application stall) via many % characters in input reaching a function call that uses the Address6 constructor.

🔗 References (3)

https://github.com/beaugunderson/ip-address/security/advisories/GHSA-rxp7-6hxx-x8q5
https://nvd.nist.gov/vuln/detail/CVE-2026-111997
https://github.com/advisories/GHSA-p3hm-x653-5rc6