Ubuntu Security Update USN-6643-1: NPM IP vulnerability

[LinuxBot]

Emre Durmaz discovered that NPM IP package incorrectly distinguished between private and public IP addresses. A remote attacker could possibly use this issue to perform Server-Side Request Forgery (SSRF) attacks.

Continue reading...