Skip to main content
Components
Vulnerabilities
Pricing
MCP
API
Docs
Sign up
Login
Find vulnerabilities. Fix fast with AI.
Search components by package, version, or CVE to get started.
software.amazon.awscdk/cdk-asset-node-prox… | Sonatype Guide
Get full component data and automated fixes with Sonatype Guide.
Sign up for free
maven
software.amazon.awscdk
cdk-asset-node-proxy-agent-v5
2.0.166
cdk-asset-node-proxy-agent-v5 2.0.166
Latest
software.amazon.awscdk
Published
Jul 20, 2023
•
Policy
compliance
maven Registry
Developer Trust Score
Recommended Version:
x.y.z
Recommended upgrade that meets your policy.
Compare Versions
Overview
Overview
Versions
167
Versions
167
Vulnerabilities
13
Vulnerabilities
13
Dependencies
4
Dependencies
4
Reset filters
Severity
Critical
(0)
High
(0)
Medium
(0)
Low
(1)
CVSS Score
0.0
10.0
EPSS Score
0.0
1.0
Malware
KEV Status
Published
Filter
Sort: Published (Newest first)
2.1
CVE-2025-59437
The ip (aka node-ip) package through 2.0.1 (in NPM) might allow SSRF because the IP address value 0 is improperly categorized as globally routable via isPublic. NOTE: this issue exists because of an incomplete fix for CVE-2024-29415. NOTE: in current versions of several applications, connection attempts to the IP address 0 (interpreted as 0.0.0.0) are blocked with error messages such as net::ERR_ADDRESS_INVALID. However, in some situations that depend on both application version and operating system, connection attempts to 0 and 0.0.0.0 are considered connection attempts to 127.0.0.1 (and, for this reason, a false value of isPublic would be preferable).
affected
Severity
Low
Published
Sep 17, 2025
